last executing test programs: 1m56.437404601s ago: executing program 2 (id=133): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000400)={0x1, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r3 = dup3(r2, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000000000002004e20e000000200000000000000000000000000000000000000000000d4539b1e1917bd0d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b500000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) 1m56.353485472s ago: executing program 2 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x15) 1m56.334070713s ago: executing program 32 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x15) 1m50.29061933s ago: executing program 4 (id=248): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r1 = socket$caif_stream(0x25, 0x1, 0x1) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m50.044572215s ago: executing program 0 (id=251): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m49.733667811s ago: executing program 1 (id=263): io_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setuid(0x0) 1m49.730313871s ago: executing program 3 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 1m49.705939962s ago: executing program 1 (id=265): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = dup2(r0, r0) write$tun(r3, 0x0, 0x46) 1m49.685337752s ago: executing program 1 (id=266): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) pipe2$watch_queue(&(0x7f00000002c0), 0x80) 1m49.660745342s ago: executing program 1 (id=267): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1m49.641923283s ago: executing program 3 (id=268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1m49.504614245s ago: executing program 0 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m49.479654796s ago: executing program 3 (id=273): r0 = socket(0x18, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.428314777s ago: executing program 4 (id=276): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 1m49.415285707s ago: executing program 0 (id=277): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="2b7069647320e03f"], 0x6) 1m49.390339748s ago: executing program 4 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 1m49.390113168s ago: executing program 3 (id=280): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) creat(0x0, 0xf4) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x102, 0x0) 1m49.352434948s ago: executing program 0 (id=281): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 1m49.315326229s ago: executing program 4 (id=282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m49.314879909s ago: executing program 4 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1m49.28585502s ago: executing program 3 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1m49.249964361s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) 1m49.210723211s ago: executing program 1 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) 1m49.045543165s ago: executing program 0 (id=287): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000000000078d60000240002801400018008000100e000000108000200e00000010c000280050001"], 0x6c}}, 0x0) 1m49.045341385s ago: executing program 1 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xb1e, 0x1, 0xffffffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0xfe, 0x6, @multicast}, 0x14) 1m49.016513425s ago: executing program 33 (id=287): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000000000078d60000240002801400018008000100e000000108000200e00000010c000280050001"], 0x6c}}, 0x0) 1m48.971143366s ago: executing program 34 (id=288): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xb1e, 0x1, 0xffffffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0xfe, 0x6, @multicast}, 0x14) 1m48.971064326s ago: executing program 3 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="2b7069647320e03f"], 0x6) 1m48.970967266s ago: executing program 35 (id=291): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="2b7069647320e03f"], 0x6) 1m48.970854016s ago: executing program 4 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4000000000000002}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) 1m48.970750456s ago: executing program 36 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1, 0x0, 0x4000000000000002}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) 2.811445196s ago: executing program 7 (id=3316): socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.765622727s ago: executing program 7 (id=3307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.745035777s ago: executing program 7 (id=3309): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = open(0x0, 0x0, 0x1fc) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x98}}, 0x0) 2.699355568s ago: executing program 7 (id=3314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 2.676250218s ago: executing program 5 (id=3318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.467770692s ago: executing program 7 (id=3319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_delete(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) 2.390771154s ago: executing program 5 (id=3324): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000001b00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 2.337040675s ago: executing program 7 (id=3326): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.331238935s ago: executing program 37 (id=3326): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.58049419s ago: executing program 5 (id=3343): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.54967643s ago: executing program 5 (id=3346): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.448490262s ago: executing program 5 (id=3349): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.189131987s ago: executing program 8 (id=3354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 1.123460818s ago: executing program 8 (id=3357): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x13c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_NAME={0x10a, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) 999.598631ms ago: executing program 6 (id=3358): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 996.558051ms ago: executing program 8 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 979.575001ms ago: executing program 6 (id=3360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) 976.942942ms ago: executing program 8 (id=3361): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 838.215964ms ago: executing program 6 (id=3362): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) 743.540376ms ago: executing program 6 (id=3363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 740.414736ms ago: executing program 8 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x240, 0xc8, 0x0, 0x9, 0x8000000, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 712.003187ms ago: executing program 6 (id=3365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 709.476237ms ago: executing program 8 (id=3366): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = eventfd2(0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) 647.452708ms ago: executing program 5 (id=3367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 646.686658ms ago: executing program 6 (id=3376): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 292.967245ms ago: executing program 9 (id=3369): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x200) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) 214.682996ms ago: executing program 2 (id=3328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 123.792228ms ago: executing program 2 (id=3370): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 105.843748ms ago: executing program 9 (id=3371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) 103.718878ms ago: executing program 2 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) 80.954469ms ago: executing program 9 (id=3373): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 60.427209ms ago: executing program 9 (id=3374): open(0x0, 0x8000, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd652170a40008000100000000000000000000ffff0a010100ff02000000000000000000000000000133"], 0x0) 25.69128ms ago: executing program 2 (id=3375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close(0x3) 25.49352ms ago: executing program 9 (id=3377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 9 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) kernel console output (not intermixed with test programs): ] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.859604][ T7147] syz.6.1364: attempt to access beyond end of device [ 88.859604][ T7147] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.860242][ T7152] netlink: 'syz.9.1366': attribute type 1 has an invalid length. [ 88.926907][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.947931][ T7152] bond0 (unregistering): Released all slaves [ 89.824591][ T7212] __nla_validate_parse: 5 callbacks suppressed [ 89.824686][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1389'. [ 89.842238][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1389'. [ 89.916653][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1394'. [ 90.767463][ T7301] loop9: detected capacity change from 0 to 1024 [ 90.805111][ T7301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.831966][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.879947][ T7317] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 91.231300][ T7355] loop8: detected capacity change from 0 to 1024 [ 91.269992][ T7355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.341231][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.499946][ T7381] netlink: 'syz.8.1452': attribute type 1 has an invalid length. [ 91.515332][ T7381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.531645][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1452'. [ 91.574580][ T7381] bond2 (unregistering): Released all slaves [ 91.924430][ T7422] netlink: 'syz.7.1471': attribute type 1 has an invalid length. [ 91.949925][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.990499][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1471'. [ 92.050519][ T7422] bond1 (unregistering): Released all slaves [ 92.490998][ T7454] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 92.578932][ T7461] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 92.599667][ T7465] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.532032][ T7505] loop7: detected capacity change from 0 to 8192 [ 93.668539][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 93.668558][ T29] audit: type=1326 audit(1757007237.771:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.705350][ T29] audit: type=1326 audit(1757007237.801:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.730080][ T29] audit: type=1326 audit(1757007237.811:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.753873][ T29] audit: type=1326 audit(1757007237.811:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.778169][ T29] audit: type=1326 audit(1757007237.811:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.802645][ T29] audit: type=1326 audit(1757007237.811:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.826641][ T29] audit: type=1326 audit(1757007237.811:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.850678][ T29] audit: type=1326 audit(1757007237.811:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.875332][ T29] audit: type=1326 audit(1757007237.811:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 93.900972][ T29] audit: type=1326 audit(1757007237.811:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7513 comm="syz.7.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7fc00000 [ 94.056653][ T7542] loop6: detected capacity change from 0 to 512 [ 94.114612][ T7542] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 94.122791][ T7542] EXT4-fs (loop6): orphan cleanup on readonly fs [ 94.140236][ T7542] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1524: corrupted inode contents [ 94.187784][ T7544] loop8: detected capacity change from 0 to 8192 [ 94.196220][ T7542] EXT4-fs (loop6): Remounting filesystem read-only [ 94.203807][ T7542] EXT4-fs (loop6): 1 truncate cleaned up [ 94.208094][ T7551] netlink: 'syz.9.1526': attribute type 10 has an invalid length. [ 94.210426][ T5564] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.219392][ T7551] syz_tun: entered promiscuous mode [ 94.231298][ T5564] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.249726][ T5564] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.260836][ T7542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.275040][ T7542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.287217][ T7551] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 94.309812][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1529'. [ 94.536247][ T7582] loop9: detected capacity change from 0 to 8192 [ 95.198822][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1556'. [ 95.216941][ T7617] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1552'. [ 95.227859][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1552'. [ 95.261302][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1557'. [ 95.303469][ T7622] loop8: detected capacity change from 0 to 512 [ 95.362877][ T7622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 95.373664][ T7622] System zones: 0-2, 18-18, 34-34 [ 95.385244][ T7622] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1558: bg 0: block 248: padding at end of block bitmap is not set [ 95.415155][ T7622] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.1558: Failed to acquire dquot type 1 [ 95.443777][ T7622] EXT4-fs (loop8): 1 truncate cleaned up [ 95.452350][ T7622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.475083][ T7622] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.511323][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.844216][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1585'. [ 96.103850][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 96.113318][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 96.146154][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 96.155483][ T9] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.253803][ T7696] loop7: detected capacity change from 0 to 1764 [ 96.350819][ T7701] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.1592'. [ 96.363273][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1592'. [ 96.375768][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1593'. [ 96.882129][ T7721] loop6: detected capacity change from 0 to 512 [ 96.905114][ T7721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 96.916272][ T7721] System zones: 0-2, 18-18, 34-34 [ 96.941776][ T7721] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1600: bg 0: block 248: padding at end of block bitmap is not set [ 96.965025][ T7721] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1600: Failed to acquire dquot type 1 [ 96.980537][ T7721] EXT4-fs (loop6): 1 truncate cleaned up [ 96.990389][ T7721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.020097][ T7721] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.050193][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.085950][ T7739] loop9: detected capacity change from 0 to 1024 [ 97.111546][ T7739] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.146249][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.155568][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.270265][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.288244][ T7757] rdma_op ffff88813d0aad80 conn xmit_rdma 0000000000000000 [ 97.445350][ T7781] bond1: (slave dummy0): Releasing active interface [ 97.541902][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.546846][ T7781] batman_adv: batadv0: Adding interface: dummy0 [ 97.551368][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.558173][ T7781] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.566440][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.593240][ T7781] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 97.624667][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.630018][ T7781] netlink: 'syz.8.1626': attribute type 10 has an invalid length. [ 97.632135][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.647902][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 97.659309][ T10] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz1 [ 97.684618][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.694637][ T7781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.746408][ T7811] vlan2: entered allmulticast mode [ 97.852974][ T7829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.928699][ T7835] loop8: detected capacity change from 0 to 512 [ 97.948144][ T7835] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 97.973845][ T7835] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1651: bg 0: block 4: invalid block bitmap [ 97.998668][ T7835] EXT4-fs (loop8): Remounting filesystem read-only [ 98.005382][ T7835] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.019944][ T7835] EXT4-fs (loop8): 1 truncate cleaned up [ 98.026043][ T7835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.055196][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.167620][ T7870] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.175373][ T7870] smc: net device bond0 erased user defined pnetid SYZ0 [ 98.636148][ T7915] loop9: detected capacity change from 0 to 1024 [ 98.645401][ T7915] EXT4-fs: Ignoring removed bh option [ 98.677176][ T7915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.780151][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.876182][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 98.876196][ T29] audit: type=1400 audit(98.858:1978): avc: denied { unmount } for pid=4467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 98.994704][ T29] audit: type=1326 audit(354.975:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.017734][ T29] audit: type=1326 audit(354.975:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.040941][ T29] audit: type=1326 audit(354.975:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.063995][ T29] audit: type=1326 audit(354.975:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.086951][ T29] audit: type=1326 audit(354.975:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.118862][ T29] audit: type=1326 audit(354.975:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.142132][ T29] audit: type=1326 audit(354.975:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.165136][ T29] audit: type=1326 audit(354.975:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.187973][ T29] audit: type=1326 audit(354.975:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7950 comm="syz.6.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 99.455270][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1712'. [ 99.748203][ T8008] netlink: 'syz.6.1725': attribute type 1 has an invalid length. [ 100.123277][ T8024] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1731'. [ 100.133336][ T8024] netlink: zone id is out of range [ 100.203907][ T8024] netlink: zone id is out of range [ 100.232187][ T8024] netlink: del zone limit has 8 unknown bytes [ 100.494778][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 100.599294][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 100.641400][ T8059] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1748'. [ 100.751832][ T8071] program syz.8.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.259903][ T8077] Set syz1 is full, maxelem 65536 reached [ 101.741949][ T8122] loop8: detected capacity change from 0 to 1024 [ 101.825814][ T8122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.912167][ T8122] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.1777: Allocating blocks 449-513 which overlap fs metadata [ 102.041044][ T8121] EXT4-fs (loop8): pa ffff8881072577e0: logic 48, phys. 177, len 21 [ 102.049168][ T8121] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 102.123264][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1786'. [ 102.132468][ T8146] netlink: 'syz.5.1786': attribute type 7 has an invalid length. [ 102.140207][ T8146] netlink: 'syz.5.1786': attribute type 8 has an invalid length. [ 102.148049][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1786'. [ 102.162234][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.424782][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1800'. [ 102.441189][ T8176] vlan2: entered allmulticast mode [ 102.446491][ T8176] bridge_slave_0: entered allmulticast mode [ 102.800622][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1810'. [ 102.840547][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.850927][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.869599][ T8204] loop7: detected capacity change from 0 to 512 [ 102.876932][ T8204] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 102.886678][ T8204] EXT4-fs (loop7): orphan cleanup on readonly fs [ 102.893433][ T8204] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 102.909909][ T8204] EXT4-fs (loop7): Remounting filesystem read-only [ 102.916689][ T8204] EXT4-fs (loop7): 1 truncate cleaned up [ 102.923247][ T8204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 102.949449][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.973659][ T8207] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 103.105744][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1817'. [ 103.369420][ T8228] erspan1: entered allmulticast mode [ 103.470081][ T8243] netlink: 'syz.5.1830': attribute type 21 has an invalid length. [ 103.478018][ T8243] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1830'. [ 103.499659][ T8243] netlink: 'syz.5.1830': attribute type 5 has an invalid length. [ 103.507496][ T8243] netlink: 'syz.5.1830': attribute type 6 has an invalid length. [ 103.515288][ T8243] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1830'. [ 103.553790][ T8242] erspan1: entered allmulticast mode [ 104.078523][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 104.078610][ T29] audit: type=1326 audit(1128.165:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.181716][ T29] audit: type=1326 audit(1128.165:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.204803][ T29] audit: type=1326 audit(1128.165:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.227742][ T29] audit: type=1326 audit(1128.165:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.250733][ T29] audit: type=1326 audit(1128.165:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.273716][ T29] audit: type=1326 audit(1128.165:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.296792][ T29] audit: type=1326 audit(1128.165:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.319768][ T29] audit: type=1326 audit(1128.175:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8276 comm="syz.7.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 104.422483][ T8295] loop8: detected capacity change from 0 to 2048 [ 104.538082][ T8295] Alternate GPT is invalid, using primary GPT. [ 104.544634][ T8295] loop8: p2 p3 p7 [ 104.685125][ T8317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8317 comm=syz.8.1862 [ 105.002468][ T8342] loop6: detected capacity change from 0 to 512 [ 105.009386][ T8342] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 105.035704][ T8342] EXT4-fs (loop6): orphan cleanup on readonly fs [ 105.043189][ T8342] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 105.143564][ T8342] EXT4-fs (loop6): Remounting filesystem read-only [ 105.173767][ T8350] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 105.176810][ T8342] EXT4-fs (loop6): 1 truncate cleaned up [ 105.180363][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.180671][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 105.196813][ T8342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.214641][ T8351] vhci_hcd: connection closed [ 105.219636][ T5548] vhci_hcd: stop threads [ 105.228721][ T5548] vhci_hcd: release socket [ 105.233154][ T5548] vhci_hcd: disconnect device [ 105.326268][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.729464][ T8326] syz.8.1866 (8326) used greatest stack depth: 7304 bytes left [ 105.749046][ T8367] __nla_validate_parse: 6 callbacks suppressed [ 105.749087][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1884'. [ 105.800420][ T29] audit: type=1326 audit(1129.960:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 105.823435][ T29] audit: type=1326 audit(1129.960:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8375 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 105.887338][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1889'. [ 105.902777][ T8387] loop9: detected capacity change from 0 to 512 [ 105.927759][ T8387] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 105.936255][ T8387] System zones: 0-2, 18-18, 34-34 [ 105.946653][ T8387] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1890: bg 0: block 248: padding at end of block bitmap is not set [ 106.095015][ T8387] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1890: Failed to acquire dquot type 1 [ 106.127461][ T8387] EXT4-fs (loop9): 1 truncate cleaned up [ 106.146588][ T8387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.195125][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.250663][ T8408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8408 comm=syz.7.1899 [ 106.578676][ T8418] loop9: detected capacity change from 0 to 512 [ 106.591837][ T8420] netlink: 'syz.7.1903': attribute type 1 has an invalid length. [ 106.621211][ T8420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.629865][ T8418] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 106.669660][ T8418] EXT4-fs (loop9): orphan cleanup on readonly fs [ 106.683031][ T8418] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 106.702108][ T8420] bond1: (slave veth9): Enslaving as an active interface with a down link [ 106.732421][ T8418] EXT4-fs (loop9): Remounting filesystem read-only [ 106.748609][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.749200][ T8418] EXT4-fs (loop9): 1 truncate cleaned up [ 106.761389][ T8431] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 106.790528][ T8418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.871464][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.935560][ T8449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8449 comm=syz.9.1914 [ 108.069482][ T8476] rdma_op ffff888139bf3d80 conn xmit_rdma 0000000000000000 [ 108.373428][ T8509] loop6: detected capacity change from 0 to 164 [ 108.412056][ T8509] syz.6.1938: attempt to access beyond end of device [ 108.412056][ T8509] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 108.436078][ T8509] syz.6.1938: attempt to access beyond end of device [ 108.436078][ T8509] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 109.080669][ T8557] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1958'. [ 109.259435][ T8570] batman_adv: batadv0: Adding interface: dummy0 [ 109.265844][ T8570] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.291202][ T8570] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 109.306815][ T8570] netlink: 'syz.7.1972': attribute type 10 has an invalid length. [ 109.326691][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.365525][ T8570] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.712013][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 109.712029][ T29] audit: type=1400 audit(1134.076:2197): avc: denied { mounton } for pid=8579 comm="syz.6.1966" path="/337/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 109.867249][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1967'. [ 110.157375][ T8575] Set syz1 is full, maxelem 65536 reached [ 110.266642][ T29] audit: type=1326 audit(1134.653:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.289639][ T29] audit: type=1326 audit(1134.653:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.312616][ T29] audit: type=1326 audit(1134.653:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.335528][ T29] audit: type=1326 audit(1134.653:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.358275][ T29] audit: type=1326 audit(1134.653:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.381256][ T29] audit: type=1326 audit(1134.653:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.416850][ T29] audit: type=1326 audit(1134.800:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.439860][ T29] audit: type=1326 audit(1134.800:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 110.462970][ T29] audit: type=1326 audit(1134.800:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8596 comm="syz.5.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 111.311675][ T8643] loop8: detected capacity change from 0 to 512 [ 111.333510][ T8643] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 111.359863][ T8643] EXT4-fs (loop8): 1 truncate cleaned up [ 111.366188][ T8643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.417639][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1995'. [ 111.644670][ T8657] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1998'. [ 111.717241][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2001'. [ 111.741463][ T8606] syz.9.1975 (8606) used greatest stack depth: 7112 bytes left [ 111.758291][ T8664] netlink: 'syz.6.2002': attribute type 1 has an invalid length. [ 111.766384][ T8662] netlink: 'syz.5.2001': attribute type 1 has an invalid length. [ 111.815280][ T8664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.876925][ T8664] bond0: (slave batadv0): Opening slave failed [ 111.997647][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.022729][ T8666] bond0: (slave veth7): Enslaving as an active interface with a down link [ 112.036205][ T8675] wireguard0: entered promiscuous mode [ 112.041917][ T8675] wireguard0: entered allmulticast mode [ 112.110418][ T8678] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2007'. [ 112.405784][ T8709] loop6: detected capacity change from 0 to 1024 [ 112.441282][ T8709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.501075][ T8709] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2032: Allocating blocks 449-513 which overlap fs metadata [ 112.543326][ T8708] EXT4-fs (loop6): pa ffff888107257770: logic 48, phys. 177, len 21 [ 112.551389][ T8708] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 112.620792][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.916498][ T8743] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.926690][ T8743] FAT-fs (loop17): unable to read boot sector [ 112.975391][ T8750] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.025529][ T8753] loop6: detected capacity change from 0 to 256 [ 113.049248][ T8750] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.080710][ T8753] FAT-fs (loop6): Directory bread(block 64) failed [ 113.087679][ T8753] FAT-fs (loop6): Directory bread(block 65) failed [ 113.094358][ T8753] FAT-fs (loop6): Directory bread(block 66) failed [ 113.106170][ T8750] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.107195][ T8753] FAT-fs (loop6): Directory bread(block 67) failed [ 113.147818][ T8753] FAT-fs (loop6): Directory bread(block 68) failed [ 113.156086][ T8753] FAT-fs (loop6): Directory bread(block 69) failed [ 113.163726][ T8753] FAT-fs (loop6): Directory bread(block 70) failed [ 113.170701][ T8753] FAT-fs (loop6): Directory bread(block 71) failed [ 113.172592][ T8750] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.177466][ T8753] FAT-fs (loop6): Directory bread(block 72) failed [ 113.194372][ T8753] FAT-fs (loop6): Directory bread(block 73) failed [ 113.223642][ T8753] syz.6.2041: attempt to access beyond end of device [ 113.223642][ T8753] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 113.244725][ T5591] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.258208][ T5591] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.274666][ T5591] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.284504][ T5591] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.308482][ T8766] syzkaller1: entered promiscuous mode [ 113.314035][ T8766] syzkaller1: entered allmulticast mode [ 113.815431][ T8798] loop8: detected capacity change from 0 to 8192 [ 113.840526][ T8806] syzkaller1: entered promiscuous mode [ 113.846056][ T8806] syzkaller1: entered allmulticast mode [ 114.288414][ T8831] netlink: 'syz.9.2074': attribute type 1 has an invalid length. [ 114.296227][ T8831] netlink: 198116 bytes leftover after parsing attributes in process `syz.9.2074'. [ 114.410100][ T8842] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.450346][ T8842] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.484683][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 114.484697][ T29] audit: type=1400 audit(1139.084:2387): avc: denied { relabelfrom } for pid=8845 comm="syz.9.2081" name="NETLINK" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.516796][ T29] audit: type=1400 audit(1139.095:2388): avc: denied { relabelto } for pid=8845 comm="syz.9.2081" name="NETLINK" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 114.584152][ T8842] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.725748][ T8842] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.857645][ T8858] loop9: detected capacity change from 0 to 2048 [ 114.871906][ T8858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.900642][ T29] audit: type=1400 audit(1139.514:2389): avc: denied { link } for pid=8857 comm="syz.9.2086" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.933442][ T5574] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.952768][ T5574] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.961521][ T5574] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.970079][ T5574] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.972974][ T8846] Set syz1 is full, maxelem 65536 reached [ 115.228192][ T29] audit: type=1326 audit(1139.861:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.250940][ T29] audit: type=1326 audit(1139.861:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.273609][ T29] audit: type=1326 audit(1139.861:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.296260][ T29] audit: type=1326 audit(1139.861:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.318924][ T29] audit: type=1326 audit(1139.861:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.341690][ T29] audit: type=1326 audit(1139.861:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.364427][ T29] audit: type=1326 audit(1139.861:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8879 comm="syz.8.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x50000 [ 115.783853][ T8899] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.795560][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.883533][ T8899] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.947106][ T8899] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.002276][ T8899] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.066902][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2114'. [ 116.126762][ T5574] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.143137][ T5574] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.151718][ T5574] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.162214][ T5574] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.295239][ T8949] loop7: detected capacity change from 0 to 512 [ 116.311343][ T8949] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.348011][ T8955] vlan2: entered allmulticast mode [ 116.353289][ T8955] bridge_slave_0: entered allmulticast mode [ 116.474515][ T8949] EXT4-fs (loop7): 1 truncate cleaned up [ 116.481610][ T8949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.495190][ T8949] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.897518][ T8994] netlink: 'syz.9.2145': attribute type 4 has an invalid length. [ 116.986694][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2148'. [ 117.314548][ T9020] loop8: detected capacity change from 0 to 128 [ 117.321460][ T9020] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.344464][ T9020] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.376024][ T8970] syz.5.2135 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 117.386804][ T8970] CPU: 1 UID: 0 PID: 8970 Comm: syz.5.2135 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.386892][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.386937][ T8970] Call Trace: [ 117.386943][ T8970] [ 117.386950][ T8970] __dump_stack+0x1d/0x30 [ 117.387010][ T8970] dump_stack_lvl+0xe8/0x140 [ 117.387034][ T8970] dump_stack+0x15/0x1b [ 117.387054][ T8970] dump_header+0x81/0x220 [ 117.387093][ T8970] oom_kill_process+0x342/0x400 [ 117.387153][ T8970] out_of_memory+0x979/0xb80 [ 117.387195][ T8970] try_charge_memcg+0x5e6/0x9e0 [ 117.387230][ T8970] charge_memcg+0x51/0xc0 [ 117.387252][ T8970] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 117.387346][ T8970] __read_swap_cache_async+0x1df/0x350 [ 117.387436][ T8970] swap_cluster_readahead+0x277/0x3e0 [ 117.387481][ T8970] swapin_readahead+0xde/0x6f0 [ 117.387511][ T8970] ? __filemap_get_folio+0x4f7/0x6b0 [ 117.387570][ T8970] ? swap_cache_get_folio+0x77/0x200 [ 117.387680][ T8970] do_swap_page+0x301/0x2430 [ 117.387703][ T8970] ? css_rstat_updated+0xb7/0x240 [ 117.387750][ T8970] ? __pfx_default_wake_function+0x10/0x10 [ 117.387775][ T8970] handle_mm_fault+0x9a5/0x2c20 [ 117.387886][ T8970] do_user_addr_fault+0x636/0x1090 [ 117.387923][ T8970] exc_page_fault+0x62/0xa0 [ 117.387948][ T8970] asm_exc_page_fault+0x26/0x30 [ 117.387967][ T8970] RIP: 0033:0x7f17e45b560c [ 117.387982][ T8970] Code: 66 0f 1f 44 00 00 69 3d a6 00 e9 00 e8 03 00 00 48 8d 1d a7 09 36 00 e8 42 95 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 117.388018][ T8970] RSP: 002b:00007ffc6d8aead0 EFLAGS: 00010202 [ 117.388038][ T8970] RAX: 0000000000000000 RBX: 00007f17e4915fa0 RCX: 0000000000000000 [ 117.388055][ T8970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556550a808 [ 117.388070][ T8970] RBP: 00007f17e4917da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 117.388086][ T8970] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001cd73 [ 117.388102][ T8970] R13: 00007ffc6d8aebc0 R14: ffffffffffffffff R15: 00007ffc6d8aebe0 [ 117.388121][ T8970] [ 117.388127][ T8970] memory: usage 307200kB, limit 307200kB, failcnt 185 [ 117.597583][ T8970] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0 [ 117.605509][ T8970] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 117.612853][ T8970] Memory cgroup stats for /syz5: [ 117.613160][ T8970] cache 0 [ 117.613186][ T5587] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.618129][ T8970] rss 0 [ 117.633012][ T8970] shmem 0 [ 117.635989][ T8970] mapped_file 0 [ 117.639539][ T8970] dirty 0 [ 117.642514][ T8970] writeback 4096 [ 117.646075][ T8970] workingset_refault_anon 74 [ 117.650718][ T8970] workingset_refault_file 0 [ 117.655236][ T8970] swap 258048 [ 117.658569][ T8970] swapcached 12288 [ 117.662308][ T8970] pgpgin 140610 [ 117.665771][ T8970] pgpgout 140607 [ 117.669438][ T8970] pgfault 124233 [ 117.673009][ T8970] pgmajfault 40 [ 117.676530][ T8970] inactive_anon 12288 [ 117.680613][ T8970] active_anon 0 [ 117.684087][ T8970] inactive_file 0 [ 117.687988][ T8970] active_file 0 [ 117.691532][ T8970] unevictable 0 [ 117.695049][ T8970] hierarchical_memory_limit 314572800 [ 117.700470][ T8970] hierarchical_memsw_limit 9223372036854771712 [ 117.706636][ T8970] total_cache 0 [ 117.710092][ T8970] total_rss 0 [ 117.713397][ T8970] total_shmem 0 [ 117.716933][ T8970] total_mapped_file 0 [ 117.720915][ T8970] total_dirty 0 [ 117.724415][ T8970] total_writeback 4096 [ 117.728489][ T8970] total_workingset_refault_anon 74 [ 117.733669][ T8970] total_workingset_refault_file 0 [ 117.738751][ T8970] total_swap 258048 [ 117.742608][ T8970] total_swapcached 12288 [ 117.746921][ T8970] total_pgpgin 140610 [ 117.750918][ T8970] total_pgpgout 140607 [ 117.755017][ T8970] total_pgfault 124233 [ 117.759088][ T8970] total_pgmajfault 40 [ 117.763131][ T8970] total_inactive_anon 12288 [ 117.767693][ T8970] total_active_anon 0 [ 117.771695][ T8970] total_inactive_file 0 [ 117.775856][ T8970] total_active_file 0 [ 117.779831][ T8970] total_unevictable 0 [ 117.783910][ T8970] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2135,pid=8970,uid=0 [ 117.798563][ T8970] Memory cgroup out of memory: Killed process 8970 (syz.5.2135) total-vm:95876kB, anon-rss:1012kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 118.062993][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2171'. [ 118.215384][ T9072] loop8: detected capacity change from 0 to 1024 [ 118.246545][ T9072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.267482][ T9072] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2183: Allocating blocks 465-513 which overlap fs metadata [ 118.284435][ T9072] EXT4-fs (loop8): pa ffff888107257850: logic 256, phys. 369, len 9 [ 118.292644][ T9072] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3 [ 118.302894][ T9072] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 118.337245][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.503241][ T9106] netlink: 'syz.6.2198': attribute type 153 has an invalid length. [ 118.536818][ T9111] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.600765][ T9111] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.679302][ T9111] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.694493][ T9124] loop6: detected capacity change from 0 to 128 [ 118.766322][ T9111] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.811718][ T9143] netlink: 64 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 118.859368][ T5563] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.881338][ T5563] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.906395][ T5563] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.917007][ T5563] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.120110][ T9159] loop8: detected capacity change from 0 to 2048 [ 119.169868][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2233'. [ 119.178891][ T9183] netlink: 'syz.6.2233': attribute type 11 has an invalid length. [ 119.190008][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2233'. [ 119.199055][ T9183] netlink: 'syz.6.2233': attribute type 11 has an invalid length. [ 119.537970][ T9214] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2256'. [ 119.561155][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 119.561172][ T29] audit: type=1400 audit(1144.397:2581): avc: denied { nlmsg_read } for pid=9213 comm="syz.9.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.798997][ T9204] Set syz1 is full, maxelem 65536 reached [ 119.921312][ T9220] loop9: detected capacity change from 0 to 512 [ 119.948711][ T9220] journal_path: Lookup failure for './file0/../file0' [ 119.955649][ T9220] EXT4-fs: error: could not find journal device path [ 120.086431][ T29] audit: type=1400 audit(1144.974:2582): avc: denied { relabelfrom } for pid=9227 comm="syz.9.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.105923][ T29] audit: type=1400 audit(1144.974:2583): avc: denied { relabelto } for pid=9227 comm="syz.9.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 120.342109][ T29] audit: type=1400 audit(1145.237:2584): avc: denied { watch } for pid=9240 comm="syz.8.2260" path="/390/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 120.408687][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 120.425371][ T9245] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 120.505857][ T9257] syzkaller0: entered promiscuous mode [ 120.511392][ T9257] syzkaller0: entered allmulticast mode [ 120.517238][ T29] audit: type=1400 audit(1145.415:2585): avc: denied { ioctl } for pid=9256 comm="syz.7.2268" path="socket:[27063]" dev="sockfs" ino=27063 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.544783][ T9257] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 120.810450][ T29] audit: type=1400 audit(1145.720:2586): avc: denied { watch } for pid=9284 comm="syz.6.2278" path="/398/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 120.860200][ T29] audit: type=1400 audit(1145.741:2587): avc: denied { map } for pid=9289 comm="syz.5.2282" path="socket:[27892]" dev="sockfs" ino=27892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 121.347572][ T9330] loop6: detected capacity change from 0 to 164 [ 121.365635][ T9330] syz.6.2297: attempt to access beyond end of device [ 121.365635][ T9330] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.396264][ T9330] syz.6.2297: attempt to access beyond end of device [ 121.396264][ T9330] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.660956][ T29] audit: type=1326 audit(1146.622:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.7.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 121.683933][ T29] audit: type=1326 audit(1146.622:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.7.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 121.712759][ T29] audit: type=1326 audit(1146.654:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.7.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59241ebe9 code=0x7ffc0000 [ 121.772963][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2317'. [ 121.821431][ T9377] vhci_hcd: invalid port number 96 [ 121.826591][ T9377] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 122.108836][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.117949][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.409652][ T9432] loop7: detected capacity change from 0 to 1024 [ 122.429976][ T9432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.487129][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.535740][ T9444] SELinux: Context Ü is not valid (left unmapped). [ 122.539358][ T9446] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2346'. [ 122.624686][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2349'. [ 122.646538][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2351'. [ 122.664121][ T9457] batman_adv: batadv0: Removing interface: dummy0 [ 122.682452][ T9457] bond0: (slave batadv0): Releasing backup interface [ 122.771354][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2358'. [ 122.844043][ T9481] loop6: detected capacity change from 0 to 1024 [ 122.858685][ T9489] loop9: detected capacity change from 0 to 512 [ 122.878190][ T9489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.893083][ T9481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.932935][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.933496][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2368'. [ 122.974022][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.007139][ T9507] loop6: detected capacity change from 0 to 1024 [ 123.016181][ T9507] EXT4-fs: inline encryption not supported [ 123.022489][ T9507] EXT4-fs: Ignoring removed bh option [ 123.043660][ T9507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.120590][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.207587][ T9530] raw_sendmsg: syz.6.2378 forgot to set AF_INET. Fix it! [ 123.395003][ T9556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9556 comm=syz.9.2391 [ 123.467229][ T9567] loop9: detected capacity change from 0 to 128 [ 123.585903][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.585903][ T5580] loop9: rw=1, sector=145, nr_sectors = 8 limit=128 [ 123.599822][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.599822][ T5580] loop9: rw=1, sector=161, nr_sectors = 8 limit=128 [ 123.614044][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.614044][ T5580] loop9: rw=1, sector=177, nr_sectors = 8 limit=128 [ 123.627778][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.627778][ T5580] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 123.642122][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.642122][ T5580] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 123.655769][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.655769][ T5580] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 123.669952][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.669952][ T5580] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 123.684131][ T5580] kworker/u8:47: attempt to access beyond end of device [ 123.684131][ T5580] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 123.689353][ T9582] loop7: detected capacity change from 0 to 512 [ 123.716612][ T9582] EXT4-fs (loop7): too many log groups per flexible block group [ 123.724460][ T9582] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 123.731786][ T9582] EXT4-fs (loop7): mount failed [ 123.742536][ T9582] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2403'. [ 123.769204][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2404'. [ 123.807000][ T9591] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2405'. [ 123.819943][ T9591] batadv0: entered promiscuous mode [ 123.825179][ T9591] batadv0: entered allmulticast mode [ 123.893570][ T9601] tipc: Started in network mode [ 123.898555][ T9601] tipc: Node identity 7, cluster identity 4711 [ 123.904754][ T9601] tipc: Node number set to 7 [ 124.122446][ T9620] loop7: detected capacity change from 0 to 8192 [ 124.270734][ T9633] pimreg: entered allmulticast mode [ 124.286443][ T9633] pimreg: left allmulticast mode [ 124.417764][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 124.417782][ T29] audit: type=1400 audit(1149.510:2657): avc: denied { create } for pid=9650 comm="syz.8.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.525078][ T9667] loop8: detected capacity change from 0 to 1024 [ 124.531783][ T9667] EXT4-fs: Ignoring removed orlov option [ 124.537579][ T9667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.545796][ T9667] EXT4-fs: Invalid want_extra_isize 8192 [ 124.591904][ T9674] loop8: detected capacity change from 0 to 512 [ 124.604239][ T9674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.620804][ T29] audit: type=1400 audit(1149.730:2658): avc: denied { append } for pid=9673 comm="syz.8.2441" path="/422/file0/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.682255][ T29] audit: type=1326 audit(1149.793:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.705360][ T29] audit: type=1326 audit(1149.793:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.728385][ T29] audit: type=1326 audit(1149.793:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.751337][ T29] audit: type=1326 audit(1149.793:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.774303][ T29] audit: type=1326 audit(1149.793:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.797275][ T29] audit: type=1326 audit(1149.793:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.820261][ T29] audit: type=1326 audit(1149.793:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.843253][ T29] audit: type=1326 audit(1149.793:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.5.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 124.980458][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.998698][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2454'. [ 125.016255][ T9704] netlink: 'syz.8.2454': attribute type 2 has an invalid length. [ 125.047757][ T9710] netlink: 'syz.6.2457': attribute type 4 has an invalid length. [ 125.088729][ T9715] netlink: 'syz.5.2459': attribute type 3 has an invalid length. [ 125.232196][ T9738] tipc: Enabled bearer , priority 0 [ 125.256426][ T9738] tipc: Disabling bearer [ 125.268670][ T9745] loop6: detected capacity change from 0 to 164 [ 125.454281][ T9769] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.508072][ T9775] loop8: detected capacity change from 0 to 2048 [ 125.517715][ T9769] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.549635][ T9775] loop8: p2 p3 p7 [ 125.567064][ T9780] loop9: detected capacity change from 0 to 1024 [ 125.576629][ T9769] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.604385][ T9780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.627357][ T9769] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.660098][ T9780] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.2490: Allocating blocks 449-513 which overlap fs metadata [ 125.689091][ T9779] EXT4-fs (loop9): pa ffff8881072023f0: logic 48, phys. 177, len 21 [ 125.697299][ T9779] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 125.720354][ T5595] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.732085][ T9794] netlink: 'syz.7.2495': attribute type 10 has an invalid length. [ 125.738826][ T5595] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.752962][ T5595] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.768790][ T9794] dummy0: left promiscuous mode [ 125.779384][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.785945][ T9794] team0: Port device dummy0 added [ 125.794107][ T9797] netlink: 'syz.7.2495': attribute type 10 has an invalid length. [ 125.807237][ T9797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.848863][ T9797] team0: Failed to send options change via netlink (err -105) [ 125.857267][ T9797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.871179][ T9797] team0: Port device dummy0 removed [ 125.881509][ T9797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.892696][ T5595] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.935201][ T9810] loop6: detected capacity change from 0 to 128 [ 125.948865][ T9810] FAT-fs (loop6): Directory bread(block 32) failed [ 125.962684][ T9810] FAT-fs (loop6): Directory bread(block 33) failed [ 125.975879][ T9810] FAT-fs (loop6): Directory bread(block 34) failed [ 125.990272][ T9810] FAT-fs (loop6): Directory bread(block 35) failed [ 126.012423][ T9819] hsr_slave_0: left promiscuous mode [ 126.018445][ T9810] FAT-fs (loop6): Directory bread(block 36) failed [ 126.030113][ T9819] hsr_slave_1: left promiscuous mode [ 126.044869][ T9810] FAT-fs (loop6): Directory bread(block 37) failed [ 126.067480][ T9810] FAT-fs (loop6): Directory bread(block 38) failed [ 126.074191][ T9810] FAT-fs (loop6): Directory bread(block 39) failed [ 126.128675][ T9810] FAT-fs (loop6): Directory bread(block 40) failed [ 126.149427][ T9810] FAT-fs (loop6): Directory bread(block 41) failed [ 126.182272][ T5557] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.230632][ T9810] bio_check_eod: 104 callbacks suppressed [ 126.230666][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.230666][ T9810] loop6: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 126.249875][ T9810] Buffer I/O error on dev loop6, logical block 1028, async page read [ 126.269454][ T5557] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.295639][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.295639][ T9810] loop6: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 126.309316][ T9810] Buffer I/O error on dev loop6, logical block 41991, async page read [ 126.317521][ T9810] FAT-fs (loop6): Filesystem has been set read-only [ 126.325329][ T9808] syz.6.2503: attempt to access beyond end of device [ 126.325329][ T9808] loop6: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 126.338677][ T9808] Buffer I/O error on dev loop6, logical block 1028, async page read [ 126.349749][ T5557] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.363596][ T5557] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.385455][ T9808] syz.6.2503: attempt to access beyond end of device [ 126.385455][ T9808] loop6: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 126.398975][ T9808] Buffer I/O error on dev loop6, logical block 41991, async page read [ 126.409114][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.409114][ T9810] loop6: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 126.422591][ T9810] Buffer I/O error on dev loop6, logical block 1028, async page read [ 126.441455][ T9850] loop8: detected capacity change from 0 to 512 [ 126.465857][ T9850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.466706][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.466706][ T9810] loop6: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 126.492029][ T9810] Buffer I/O error on dev loop6, logical block 41991, async page read [ 126.500982][ T9808] syz.6.2503: attempt to access beyond end of device [ 126.500982][ T9808] loop6: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 126.514368][ T9808] Buffer I/O error on dev loop6, logical block 1028, async page read [ 126.522980][ T9808] syz.6.2503: attempt to access beyond end of device [ 126.522980][ T9808] loop6: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 126.536448][ T9808] Buffer I/O error on dev loop6, logical block 41991, async page read [ 126.544962][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.544962][ T9810] loop6: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 126.558334][ T9810] Buffer I/O error on dev loop6, logical block 1028, async page read [ 126.566667][ T9810] syz.6.2503: attempt to access beyond end of device [ 126.566667][ T9810] loop6: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 126.580116][ T9810] Buffer I/O error on dev loop6, logical block 41991, async page read [ 126.627338][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9860 comm=syz.9.2522 [ 126.689051][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.809551][ T9875] netlink: 'syz.9.2529': attribute type 21 has an invalid length. [ 126.817530][ T9875] __nla_validate_parse: 6 callbacks suppressed [ 126.817567][ T9875] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2529'. [ 126.890063][ T9875] netlink: 'syz.9.2529': attribute type 5 has an invalid length. [ 126.897962][ T9875] netlink: 'syz.9.2529': attribute type 6 has an invalid length. [ 126.905757][ T9875] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2529'. [ 127.160936][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2548'. [ 127.277376][ T9937] loop9: detected capacity change from 0 to 512 [ 127.313343][ T9937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.380265][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.433752][ T9954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9954 comm=syz.6.2565 [ 127.883430][ T9987] netlink: 'syz.8.2579': attribute type 27 has an invalid length. [ 127.896768][ T9979] loop6: detected capacity change from 0 to 8192 [ 128.405771][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.419036][ T9987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.475078][ T9987] erspan1: left allmulticast mode [ 128.494135][ T9994] macvlan1: entered promiscuous mode [ 128.510974][ T9994] ipvlan0: entered promiscuous mode [ 128.523499][ T9994] ipvlan0: left promiscuous mode [ 128.542973][ T9994] macvlan1: left promiscuous mode [ 128.582992][T10000] netem: incorrect ge model size [ 128.587999][T10000] netem: change failed [ 128.608119][ T5580] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.642722][ T5580] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.656121][T10030] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.676921][ T5580] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.706341][ T5580] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.734097][T10030] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.768076][T10034] loop8: detected capacity change from 0 to 8192 [ 128.821745][T10030] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.869646][T10030] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.927906][T10061] loop7: detected capacity change from 0 to 512 [ 128.953570][T10061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.987779][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.005204][T10071] loop9: detected capacity change from 0 to 512 [ 129.014534][T10071] EXT4-fs (loop9): orphan cleanup on readonly fs [ 129.021803][T10071] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.2606: invalid block [ 129.036117][T10071] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2606: invalid indirect mapped block 4294967295 (level 1) [ 129.058150][T10071] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2606: invalid indirect mapped block 4294967295 (level 1) [ 129.074826][T10071] EXT4-fs (loop9): 2 truncates cleaned up [ 129.084089][T10076] loop7: detected capacity change from 0 to 2048 [ 129.091633][T10071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.116375][T10076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.170748][T10080] sctp: [Deprecated]: syz.8.2608 (pid 10080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.170748][T10080] Use struct sctp_sack_info instead [ 129.187220][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 129.187236][ T29] audit: type=1326 audit(1154.507:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.9.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fee7482ebe9 code=0x7ffc0000 [ 129.216443][ T29] audit: type=1326 audit(1154.507:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.9.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7482ebe9 code=0x7ffc0000 [ 129.239494][ T29] audit: type=1326 audit(1154.507:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10070 comm="syz.9.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee7482ebe9 code=0x7ffc0000 [ 129.275513][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.306122][ T5574] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.319977][ T5580] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.337801][ T5557] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.358538][ T5580] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.433775][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.644128][ T29] audit: type=1326 audit(1155.001:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 129.667421][ T29] audit: type=1326 audit(1155.001:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 129.712485][ T29] audit: type=1326 audit(1155.053:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 129.735643][ T29] audit: type=1326 audit(1155.053:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 129.758702][ T29] audit: type=1326 audit(1155.053:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10116 comm="syz.5.2624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 129.781908][ T29] audit: type=1326 audit(1155.053:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 129.805010][ T29] audit: type=1326 audit(1155.053:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.6.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 129.842695][T10131] loop6: detected capacity change from 0 to 512 [ 129.873193][T10131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.948893][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.966401][T10143] sch_fq: defrate 4294967295 ignored. [ 130.419034][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2642'. [ 131.398998][T10228] openvswitch: netlink: Message has 6 unknown bytes. [ 131.478186][T10236] veth13: entered promiscuous mode [ 131.579673][T10248] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2679'. [ 131.941923][T10022] IPVS: starting estimator thread 0... [ 132.029448][T10264] IPVS: using max 2304 ests per chain, 115200 per kthread [ 132.535518][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2716'. [ 132.692434][T10344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.847374][T10354] netlink: 'syz.9.2726': attribute type 12 has an invalid length. [ 133.037004][T10358] loop6: detected capacity change from 0 to 8192 [ 133.101473][T10367] loop9: detected capacity change from 0 to 1024 [ 133.131155][T10367] EXT4-fs: Ignoring removed nobh option [ 133.144849][T10367] EXT4-fs: Ignoring removed bh option [ 133.167857][T10367] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 133.203394][T10367] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.416241][T10022] IPVS: starting estimator thread 0... [ 133.510123][T10384] IPVS: using max 1824 ests per chain, 91200 per kthread [ 133.536710][T10391] loop7: detected capacity change from 0 to 1024 [ 133.543871][T10391] EXT4-fs: Ignoring removed orlov option [ 133.564065][T10391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.587759][T10391] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2739: bg 0: block 88: padding at end of block bitmap is not set [ 133.615247][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.868591][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.017661][T10432] loop9: detected capacity change from 0 to 2048 [ 134.031688][T10432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.216404][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.285952][T10447] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.383308][T10447] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.459434][T10447] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.554628][T10447] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.574977][T10459] ip6_vti0: mtu greater than device maximum [ 134.625918][ T5556] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.656909][ T5556] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.668714][ T5556] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.678183][ T5556] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.717024][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 134.717040][ T29] audit: type=1326 audit(1160.334:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.793563][ T29] audit: type=1326 audit(1160.334:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.816682][ T29] audit: type=1326 audit(1160.334:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.839748][ T29] audit: type=1326 audit(1160.334:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.862796][ T29] audit: type=1326 audit(1160.334:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.885915][ T29] audit: type=1326 audit(1160.334:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.909012][ T29] audit: type=1326 audit(1160.334:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.932057][ T29] audit: type=1326 audit(1160.334:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.955166][ T29] audit: type=1326 audit(1160.334:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 134.978205][ T29] audit: type=1326 audit(1160.334:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.6.2773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa5668ebe9 code=0x7ffc0000 [ 135.215601][T10022] IPVS: starting estimator thread 0... [ 135.316286][T10500] IPVS: using max 2256 ests per chain, 112800 per kthread [ 135.360468][T10512] netlink: 'syz.7.2789': attribute type 21 has an invalid length. [ 135.368391][T10512] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2789'. [ 135.377685][T10512] netlink: 'syz.7.2789': attribute type 5 has an invalid length. [ 135.385520][T10512] netlink: 'syz.7.2789': attribute type 6 has an invalid length. [ 135.393444][T10512] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2789'. [ 135.415955][T10517] loop8: detected capacity change from 0 to 1024 [ 135.429970][T10517] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.478612][T10517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.515173][T10517] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 135.545036][T10517] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.557327][T10517] EXT4-fs (loop8): This should not happen!! Data will be lost [ 135.557327][T10517] [ 135.567028][T10517] EXT4-fs (loop8): Total free blocks count 0 [ 135.573111][T10517] EXT4-fs (loop8): Free/Dirty block details [ 135.579140][T10517] EXT4-fs (loop8): free_blocks=68451041280 [ 135.585002][T10517] EXT4-fs (loop8): dirty_blocks=80 [ 135.590134][T10517] EXT4-fs (loop8): Block reservation details [ 135.596183][T10517] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 135.609329][ T5599] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 135.796218][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2798'. [ 135.977839][T10521] loop7: detected capacity change from 0 to 2048 [ 136.025427][T10521] EXT4-fs (loop7): failed to initialize system zone (-117) [ 136.048249][T10521] EXT4-fs (loop7): mount failed [ 136.060951][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2810'. [ 136.081037][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2810'. [ 136.250466][T10577] netlink: 'syz.6.2816': attribute type 10 has an invalid length. [ 136.258604][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2816'. [ 136.377913][T10584] pim6reg: entered allmulticast mode [ 136.384154][T10584] netlink: 'syz.5.2819': attribute type 10 has an invalid length. [ 136.578670][T10603] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2827'. [ 136.587976][T10603] netem: change failed [ 137.410461][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2868'. [ 137.425618][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2868'. [ 137.538586][T10702] netlink: 'syz.5.2872': attribute type 10 has an invalid length. [ 137.546591][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2872'. [ 137.558038][T10702] batman_adv: batadv0: Adding interface: veth1_vlan [ 137.564929][T10702] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.592685][T10702] batman_adv: batadv0: Interface activated: veth1_vlan [ 137.974457][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2889'. [ 137.993857][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2890'. [ 138.060385][T10764] loop8: detected capacity change from 0 to 164 [ 138.069948][T10764] bio_check_eod: 2218 callbacks suppressed [ 138.069965][T10764] syz.8.2895: attempt to access beyond end of device [ 138.069965][T10764] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 138.090893][T10764] syz.8.2895: attempt to access beyond end of device [ 138.090893][T10764] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 138.144160][T10765] loop6: detected capacity change from 0 to 8192 [ 138.154692][T10765] syz.6.2896: attempt to access beyond end of device [ 138.154692][T10765] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 138.173709][T10765] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 138.181637][T10765] FAT-fs (loop6): Filesystem has been set read-only [ 138.189946][T10765] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 138.198255][T10765] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 138.321926][T10797] loop9: detected capacity change from 0 to 1024 [ 138.373387][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2913'. [ 138.407403][T10797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.477613][T10813] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2916'. [ 138.548210][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2918'. [ 138.572674][T10819] bridge0: entered promiscuous mode [ 138.577977][T10819] macvtap1: entered allmulticast mode [ 138.583476][T10819] bridge0: entered allmulticast mode [ 138.590507][T10819] bridge0: port 1(macvtap1) entered blocking state [ 138.597148][T10819] bridge0: port 1(macvtap1) entered disabled state [ 138.610812][T10819] bridge0: left allmulticast mode [ 138.615904][T10819] bridge0: left promiscuous mode [ 138.647500][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2918'. [ 138.689034][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.828350][T10840] tipc: Enabled bearer , priority 0 [ 138.846999][T10840] tipc: Disabling bearer [ 139.021190][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2939'. [ 139.104370][T10861] netlink: 'syz.9.2939': attribute type 6 has an invalid length. [ 139.169960][T10883] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 139.271897][T10901] netlink: 'syz.8.2956': attribute type 3 has an invalid length. [ 139.426991][T10923] netlink: 'syz.9.2968': attribute type 12 has an invalid length. [ 139.434887][T10923] netlink: 'syz.9.2968': attribute type 29 has an invalid length. [ 139.610641][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 139.610655][ T29] audit: type=1326 audit(1165.469:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.708286][ T29] audit: type=1326 audit(1165.500:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.731341][ T29] audit: type=1326 audit(1165.500:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.754552][ T29] audit: type=1326 audit(1165.500:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.777666][ T29] audit: type=1326 audit(1165.500:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.800668][ T29] audit: type=1326 audit(1165.500:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.823653][ T29] audit: type=1326 audit(1165.500:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.846871][ T29] audit: type=1326 audit(1165.500:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.869888][ T29] audit: type=1326 audit(1165.500:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10938 comm="syz.5.2973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 139.893173][ T29] audit: type=1400 audit(1165.532:3187): avc: denied { setattr } for pid=10942 comm="syz.8.2976" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.239264][T10978] loop6: detected capacity change from 0 to 2048 [ 140.268946][T10978] loop6: p1 < > p3 p4 [ 140.274228][T10978] loop6: p3 size 83886080 extends beyond EOD, truncated [ 140.282064][T10978] loop6: p4 start 33554432 is beyond EOD, truncated [ 140.330555][T10983] syzkaller1: entered promiscuous mode [ 140.336170][T10983] syzkaller1: entered allmulticast mode [ 140.704849][T11007] netlink: 'syz.9.3001': attribute type 4 has an invalid length. [ 140.713916][T11007] netlink: 'syz.9.3001': attribute type 4 has an invalid length. [ 140.994584][T11040] bond0: (slave dummy0): Releasing backup interface [ 141.025495][T11040] bond1: (slave veth9): Releasing active interface [ 141.037906][T11043] netlink: 'syz.7.3017': attribute type 10 has an invalid length. [ 141.052079][T11043] veth1_vlan: left promiscuous mode [ 141.058039][T11043] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 141.179583][T11065] macvtap1: entered allmulticast mode [ 141.185102][T11065] bridge0: entered allmulticast mode [ 141.191139][T11065] bridge0: port 3(macvtap1) entered blocking state [ 141.197732][T11065] bridge0: port 3(macvtap1) entered disabled state [ 141.205165][T11065] bridge0: left allmulticast mode [ 141.605426][T11072] loop9: detected capacity change from 0 to 2048 [ 141.613499][T11072] ext4: Unknown parameter 'measure' [ 141.655847][T11076] gtp0: entered promiscuous mode [ 141.923777][T11094] loop6: detected capacity change from 0 to 128 [ 141.931373][T11091] loop9: detected capacity change from 0 to 1024 [ 141.964127][T11091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 141.975598][T11091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.991223][T11091] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3039: bg 0: block 88: padding at end of block bitmap is not set [ 142.031446][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.250505][T11122] loop6: detected capacity change from 0 to 512 [ 142.286585][T11122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.309410][T11122] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3052: corrupted inode contents [ 142.330768][T11122] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3052: mark_inode_dirty error [ 142.353504][T11122] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3052: corrupted inode contents [ 142.374492][T11122] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3052: mark_inode_dirty error [ 142.427743][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.505567][T11139] __nla_validate_parse: 9 callbacks suppressed [ 142.505585][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3060'. [ 142.706562][T11159] loop9: detected capacity change from 0 to 1024 [ 142.723221][T11159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.751459][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.949363][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3073'. [ 142.972955][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3073'. [ 143.017457][T11176] loop8: detected capacity change from 0 to 2048 [ 143.094770][T11176] loop8: p1 < > p3 p4 [ 143.114985][T11176] loop8: p3 size 83886080 extends beyond EOD, truncated [ 143.127144][T11176] loop8: p4 start 33554432 is beyond EOD, truncated [ 143.232537][T11193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11193 comm=syz.8.3085 [ 143.250626][T11199] loop7: detected capacity change from 0 to 1024 [ 143.252806][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3088'. [ 143.266118][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3088'. [ 143.289339][T11199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.318648][T11199] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 2: comm syz.7.3087: lblock 2 mapped to illegal pblock 2 (length 4) [ 143.335821][T11199] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.3087: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.350884][T11199] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 143.363254][T11199] EXT4-fs (loop7): This should not happen!! Data will be lost [ 143.363254][T11199] [ 143.414320][ T5556] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:25: lblock 8 mapped to illegal pblock 8 (length 8) [ 143.438298][ T5556] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 143.450691][ T5556] EXT4-fs (loop7): This should not happen!! Data will be lost [ 143.450691][ T5556] [ 143.463332][T11210] bond0: (slave veth7): Releasing active interface [ 143.473363][T11213] netlink: 'syz.6.3091': attribute type 10 has an invalid length. [ 143.481427][T11213] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3091'. [ 143.486973][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.504478][T11213] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 143.545361][T11217] syzkaller0: entered promiscuous mode [ 143.550873][T11217] syzkaller0: entered allmulticast mode [ 143.613385][T11221] loop9: detected capacity change from 0 to 2048 [ 143.659302][T11221] loop9: p1 < > p3 p4 [ 143.664074][T11221] loop9: p3 size 83886080 extends beyond EOD, truncated [ 143.679064][T11221] loop9: p4 start 33554432 is beyond EOD, truncated [ 143.731971][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3101'. [ 143.753077][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3101'. [ 143.812172][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3106'. [ 143.813706][T11247] IPVS: Error connecting to the multicast addr [ 144.073500][T11273] loop9: detected capacity change from 0 to 1024 [ 144.123094][T11273] EXT4-fs: Ignoring removed bh option [ 144.167688][T11273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.194285][T11273] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 144.241357][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.309525][T11284] loop7: detected capacity change from 0 to 2048 [ 144.333235][T11284] ext4: Unknown parameter 'measure' [ 144.449306][T11299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.460301][T11299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.532803][T11296] infiniband syz!: set down [ 144.537498][T11296] infiniband syz!: added team_slave_0 [ 144.575644][T11296] RDS/IB: syz!: added [ 144.580853][T11296] smc: adding ib device syz! with port count 1 [ 144.592223][T11296] smc: ib device syz! port 1 has pnetid [ 144.657734][T11306] loop7: detected capacity change from 0 to 1024 [ 144.682354][T11306] EXT4-fs: Ignoring removed bh option [ 144.736955][T11306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.791444][T11306] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 144.853136][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.925583][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3134'. [ 145.138021][T11288] syz.6.3124 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 145.152589][T11288] CPU: 1 UID: 0 PID: 11288 Comm: syz.6.3124 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.152625][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.152669][T11288] Call Trace: [ 145.152677][T11288] [ 145.152688][T11288] __dump_stack+0x1d/0x30 [ 145.152716][T11288] dump_stack_lvl+0xe8/0x140 [ 145.152743][T11288] dump_stack+0x15/0x1b [ 145.152831][T11288] dump_header+0x81/0x220 [ 145.152875][T11288] oom_kill_process+0x342/0x400 [ 145.152920][T11288] out_of_memory+0x979/0xb80 [ 145.152998][T11288] try_charge_memcg+0x5e6/0x9e0 [ 145.153050][T11288] obj_cgroup_charge_pages+0xa6/0x150 [ 145.153095][T11288] __memcg_kmem_charge_page+0x9f/0x170 [ 145.153248][T11288] __alloc_frozen_pages_noprof+0x188/0x360 [ 145.153323][T11288] alloc_pages_mpol+0xb3/0x250 [ 145.153362][T11288] alloc_pages_noprof+0x90/0x130 [ 145.153407][T11288] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 145.153509][T11288] __kvmalloc_node_noprof+0x30f/0x4e0 [ 145.153551][T11288] ? ip_set_alloc+0x1f/0x30 [ 145.153574][T11288] ? ip_set_alloc+0x1f/0x30 [ 145.153601][T11288] ? __kmalloc_cache_noprof+0x189/0x320 [ 145.153641][T11288] ip_set_alloc+0x1f/0x30 [ 145.153660][T11288] hash_netiface_create+0x282/0x740 [ 145.153713][T11288] ? __pfx_hash_netiface_create+0x10/0x10 [ 145.153740][T11288] ip_set_create+0x3c9/0x960 [ 145.153773][T11288] ? __nla_parse+0x40/0x60 [ 145.153807][T11288] nfnetlink_rcv_msg+0x4c6/0x590 [ 145.153953][T11288] netlink_rcv_skb+0x120/0x220 [ 145.154029][T11288] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 145.154096][T11288] nfnetlink_rcv+0x16b/0x1690 [ 145.154170][T11288] ? nlmon_xmit+0x4f/0x60 [ 145.154202][T11288] ? consume_skb+0x49/0x150 [ 145.154294][T11288] ? nlmon_xmit+0x4f/0x60 [ 145.154390][T11288] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 145.154420][T11288] ? __dev_queue_xmit+0x1200/0x2000 [ 145.154468][T11288] ? __dev_queue_xmit+0x182/0x2000 [ 145.154496][T11288] ? ref_tracker_free+0x37d/0x3e0 [ 145.154528][T11288] ? __netlink_deliver_tap+0x4dc/0x500 [ 145.154562][T11288] netlink_unicast+0x5c0/0x690 [ 145.154583][T11288] netlink_sendmsg+0x58b/0x6b0 [ 145.154633][T11288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.154663][T11288] __sock_sendmsg+0x142/0x180 [ 145.154697][T11288] ____sys_sendmsg+0x31e/0x4e0 [ 145.154751][T11288] ___sys_sendmsg+0x17b/0x1d0 [ 145.154813][T11288] __x64_sys_sendmsg+0xd4/0x160 [ 145.154846][T11288] x64_sys_call+0x191e/0x2ff0 [ 145.154938][T11288] do_syscall_64+0xd2/0x200 [ 145.154973][T11288] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.155004][T11288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 145.155033][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.155139][T11288] RIP: 0033:0x7faa5668ebe9 [ 145.155169][T11288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.155189][T11288] RSP: 002b:00007faa550f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.155284][T11288] RAX: ffffffffffffffda RBX: 00007faa568c5fa0 RCX: 00007faa5668ebe9 [ 145.155301][T11288] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 145.155373][T11288] RBP: 00007faa56711e19 R08: 0000000000000000 R09: 0000000000000000 [ 145.155389][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.155403][T11288] R13: 00007faa568c6038 R14: 00007faa568c5fa0 R15: 00007ffe5fe953a8 [ 145.155421][T11288] [ 145.485520][T11288] memory: usage 307200kB, limit 307200kB, failcnt 69 [ 145.492325][T11288] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 145.500265][T11288] kmem: usage 306992kB, limit 9007199254740988kB, failcnt 0 [ 145.507675][T11288] Memory cgroup stats for /syz6: [ 145.509190][T11340] IPVS: Error connecting to the multicast addr [ 145.557826][T11344] batman_adv: batadv0: Removing interface: dummy0 [ 145.566253][T11344] bond0: (slave batadv0): Releasing backup interface [ 145.573376][T11288] cache 0 [ 145.576358][T11288] rss 196608 [ 145.579561][T11288] shmem 0 [ 145.582501][T11288] mapped_file 0 [ 145.586166][T11288] dirty 0 [ 145.589112][T11288] writeback 0 [ 145.592402][T11288] workingset_refault_anon 21 [ 145.597082][T11288] workingset_refault_file 0 [ 145.601600][T11288] swap 0 [ 145.604680][T11288] swapcached 0 [ 145.608173][T11288] pgpgin 65565 [ 145.611578][T11288] pgpgout 65517 [ 145.615046][T11288] pgfault 118813 [ 145.618587][T11288] pgmajfault 7 [ 145.621995][T11288] inactive_anon 192512 [ 145.626070][T11288] active_anon 4096 [ 145.629791][T11288] inactive_file 0 [ 145.633451][T11288] active_file 0 [ 145.636916][T11288] unevictable 0 [ 145.640425][T11288] hierarchical_memory_limit 314572800 [ 145.645807][T11288] hierarchical_memsw_limit 9223372036854771712 [ 145.652094][T11288] total_cache 0 [ 145.655629][T11288] total_rss 196608 [ 145.659369][T11288] total_shmem 0 [ 145.662838][T11288] total_mapped_file 0 [ 145.666854][T11288] total_dirty 0 [ 145.670340][T11288] total_writeback 0 [ 145.674156][T11288] total_workingset_refault_anon 21 [ 145.679316][T11288] total_workingset_refault_file 0 [ 145.684371][T11288] total_swap 0 [ 145.687757][T11288] total_swapcached 0 [ 145.691696][T11288] total_pgpgin 65565 [ 145.695641][T11288] total_pgpgout 65517 [ 145.699653][T11288] total_pgfault 118813 [ 145.703740][T11288] total_pgmajfault 7 [ 145.707677][T11288] total_inactive_anon 192512 [ 145.712294][T11288] total_active_anon 4096 [ 145.716689][T11288] total_inactive_file 0 [ 145.720881][T11288] total_active_file 0 [ 145.724875][T11288] total_unevictable 0 [ 145.728884][T11288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3124,pid=11287,uid=0 [ 145.743700][T11288] Memory cgroup out of memory: Killed process 11288 (syz.6.3124) total-vm:95744kB, anon-rss:1140kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 145.762202][T11344] bond0: (slave bond_slave_0): Releasing backup interface [ 145.771168][T11344] bond0: (slave bond_slave_1): Releasing backup interface [ 145.785749][T11344] team0: Port device team_slave_0 removed [ 145.797628][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 145.797645][ T29] audit: type=1326 audit(1171.968:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 145.831165][ T29] audit: type=1326 audit(1171.999:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 145.854242][ T29] audit: type=1400 audit(1171.999:3330): avc: denied { write } for pid=11347 comm="syz.5.3143" name="file0" dev="tmpfs" ino=3303 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.876310][ T29] audit: type=1326 audit(1171.999:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 145.899331][ T29] audit: type=1326 audit(1171.999:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.3143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17e46debe9 code=0x7ffc0000 [ 145.922830][T11344] team0: Port device team_slave_1 removed [ 145.929106][T11344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.938956][T11344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.946944][T11344] bond1: (slave veth3): Releasing active interface [ 145.982375][T11354] lo speed is unknown, defaulting to 1000 [ 145.988670][T11354] lo speed is unknown, defaulting to 1000 [ 146.004748][T11350] loop8: detected capacity change from 0 to 2048 [ 146.011867][T11350] ext4: Unknown parameter 'measure' [ 146.017261][T11354] lo speed is unknown, defaulting to 1000 [ 146.024111][T11354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.036878][T11354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.082936][ T29] audit: type=1326 audit(1172.262:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.8.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 146.119112][T11354] lo speed is unknown, defaulting to 1000 [ 146.125261][T11354] lo speed is unknown, defaulting to 1000 [ 146.133346][T11354] lo speed is unknown, defaulting to 1000 [ 146.139668][T11354] lo speed is unknown, defaulting to 1000 [ 146.152080][T11354] lo speed is unknown, defaulting to 1000 [ 146.162624][ T29] audit: type=1326 audit(1172.293:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.8.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 146.185674][ T29] audit: type=1326 audit(1172.293:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.8.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 146.208712][ T29] audit: type=1326 audit(1172.293:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.8.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 146.231816][ T29] audit: type=1326 audit(1172.293:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.8.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 146.540114][T11414] loop7: detected capacity change from 0 to 1024 [ 146.560248][T11414] EXT4-fs: Ignoring removed nobh option [ 146.579173][T11414] EXT4-fs: Ignoring removed bh option [ 146.596222][T11414] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 146.646443][T11414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.885314][T11433] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.918169][T11433] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.975093][T11433] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.023399][T11433] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.056946][ T4451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.081294][ T5581] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.089838][ T5581] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.106532][ T5581] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.115207][ T5581] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.232608][T11468] pim6reg: entered allmulticast mode [ 147.239875][T11468] bridge0: entered allmulticast mode [ 147.352802][T11478] SELinux: failed to load policy [ 147.407780][T11485] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.490541][T11485] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.527257][T11485] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.575117][T11485] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.637006][ T5599] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.649798][ T5599] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.670355][ T5599] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.704060][ T5599] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.733137][T11496] loop8: detected capacity change from 0 to 1024 [ 147.740769][T11496] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 147.750644][T11496] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 147.762823][T11496] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 147.774989][T11496] EXT4-fs error (device loop8): ext4_get_journal_inode:5800: inode #5: comm syz.8.3204: unexpected bad inode w/o EXT4_IGET_BAD [ 147.790417][T11496] EXT4-fs (loop8): no journal found [ 147.795791][T11496] EXT4-fs (loop8): can't get journal size [ 147.804500][T11496] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.842932][ T4470] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.032648][T11519] __nla_validate_parse: 8 callbacks suppressed [ 148.032667][T11519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3212'. [ 148.123904][T11520] loop9: detected capacity change from 0 to 2048 [ 148.141367][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.165511][T11520] EXT4-fs (loop9): failed to initialize system zone (-117) [ 148.183120][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.201068][T11520] EXT4-fs (loop9): mount failed [ 148.446993][T11542] loop7: detected capacity change from 0 to 2048 [ 148.511974][T11542] loop7: p2 p3 p7 [ 149.219144][T11585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3241'. [ 149.318306][T11593] vhci_hcd: invalid port number 96 [ 149.323462][T11593] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 149.637056][T11620] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3259'. [ 149.746550][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3264'. [ 149.927007][T11647] lo speed is unknown, defaulting to 1000 [ 149.973006][T11648] loop8: detected capacity change from 0 to 8192 [ 149.979681][T11648] msdos: Unknown parameter 'A' [ 150.417580][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3283'. [ 150.426538][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 150.438319][ T5599] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.438329][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3283'. [ 150.447768][ T5599] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.455560][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3283'. [ 150.473060][ T5556] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.481425][ T5556] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.566300][T11693] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.622459][T11693] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.681539][T11693] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.727306][T11693] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.750504][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3293'. [ 150.785484][ T5556] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.800877][ T5556] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.823762][ T5556] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.841048][ T5556] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.902445][T11705] loop7: detected capacity change from 0 to 1024 [ 150.915596][T11705] EXT4-fs (loop7): filesystem too large to mount safely on this system [ 151.287587][T11698] syz.8.3291 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 151.302150][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.8.3291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.302185][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.302202][T11698] Call Trace: [ 151.302209][T11698] [ 151.302218][T11698] __dump_stack+0x1d/0x30 [ 151.302311][T11698] dump_stack_lvl+0xe8/0x140 [ 151.302329][T11698] dump_stack+0x15/0x1b [ 151.302406][T11698] dump_header+0x81/0x220 [ 151.302455][T11698] oom_kill_process+0x342/0x400 [ 151.302487][T11698] out_of_memory+0x979/0xb80 [ 151.302544][T11698] try_charge_memcg+0x5e6/0x9e0 [ 151.302583][T11698] obj_cgroup_charge_pages+0xa6/0x150 [ 151.302622][T11698] __memcg_kmem_charge_page+0x9f/0x170 [ 151.302712][T11698] __alloc_frozen_pages_noprof+0x188/0x360 [ 151.302761][T11698] alloc_pages_mpol+0xb3/0x250 [ 151.302802][T11698] alloc_pages_noprof+0x90/0x130 [ 151.302920][T11698] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 151.302967][T11698] __kvmalloc_node_noprof+0x30f/0x4e0 [ 151.303006][T11698] ? ip_set_alloc+0x1f/0x30 [ 151.303069][T11698] ? ip_set_alloc+0x1f/0x30 [ 151.303089][T11698] ? __kmalloc_cache_noprof+0x189/0x320 [ 151.303189][T11698] ip_set_alloc+0x1f/0x30 [ 151.303210][T11698] hash_netiface_create+0x282/0x740 [ 151.303236][T11698] ? __pfx_hash_netiface_create+0x10/0x10 [ 151.303297][T11698] ip_set_create+0x3c9/0x960 [ 151.303335][T11698] ? __nla_parse+0x40/0x60 [ 151.303373][T11698] nfnetlink_rcv_msg+0x4c6/0x590 [ 151.303423][T11698] netlink_rcv_skb+0x120/0x220 [ 151.303456][T11698] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 151.303553][T11698] nfnetlink_rcv+0x16b/0x1690 [ 151.303624][T11698] ? __rcu_read_lock+0x37/0x50 [ 151.303645][T11698] ? __pte_offset_map_lock+0x1d4/0x230 [ 151.303680][T11698] ? css_rstat_updated+0xb7/0x240 [ 151.303710][T11698] ? __rcu_read_unlock+0x4f/0x70 [ 151.303788][T11698] ? _raw_spin_unlock+0x26/0x50 [ 151.303806][T11698] ? page_vma_mapped_walk+0x9f1/0xdb0 [ 151.303836][T11698] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 151.303930][T11698] ? remove_migration_pte+0xa38/0xa70 [ 151.304012][T11698] ? __list_add_valid_or_report+0x38/0xe0 [ 151.304041][T11698] ? free_frozen_page_commit+0x6f/0x2a0 [ 151.304115][T11698] ? should_fail_ex+0x30/0x280 [ 151.304136][T11698] ? __netlink_lookup+0x1b5/0x2a0 [ 151.304159][T11698] ? __rcu_read_unlock+0x34/0x70 [ 151.304229][T11698] ? __netlink_lookup+0x266/0x2a0 [ 151.304255][T11698] netlink_unicast+0x5c0/0x690 [ 151.304299][T11698] netlink_sendmsg+0x58b/0x6b0 [ 151.304324][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.304350][T11698] __sock_sendmsg+0x142/0x180 [ 151.304381][T11698] ____sys_sendmsg+0x31e/0x4e0 [ 151.304455][T11698] ___sys_sendmsg+0x17b/0x1d0 [ 151.304491][T11698] __x64_sys_sendmsg+0xd4/0x160 [ 151.304519][T11698] x64_sys_call+0x191e/0x2ff0 [ 151.304540][T11698] do_syscall_64+0xd2/0x200 [ 151.304587][T11698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.304620][T11698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 151.304649][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.304687][T11698] RIP: 0033:0x7f19113febe9 [ 151.304702][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.304720][T11698] RSP: 002b:00007f190fe5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.304740][T11698] RAX: ffffffffffffffda RBX: 00007f1911635fa0 RCX: 00007f19113febe9 [ 151.304752][T11698] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 151.304765][T11698] RBP: 00007f1911481e19 R08: 0000000000000000 R09: 0000000000000000 [ 151.304777][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.304789][T11698] R13: 00007f1911636038 R14: 00007f1911635fa0 R15: 00007ffddfd80908 [ 151.304877][T11698] [ 151.304987][T11698] memory: usage 307200kB, limit 307200kB, failcnt 120 [ 151.675813][T11698] memory+swap: usage 307300kB, limit 9007199254740988kB, failcnt 0 [ 151.683727][T11698] kmem: usage 306832kB, limit 9007199254740988kB, failcnt 0 [ 151.691051][T11698] Memory cgroup stats for /syz8: [ 151.691272][T11698] cache 0 [ 151.699257][T11698] rss 233472 [ 151.702461][T11698] shmem 0 [ 151.705397][T11698] mapped_file 0 [ 151.708911][T11698] dirty 0 [ 151.711856][T11698] writeback 0 [ 151.715156][T11698] workingset_refault_anon 55 [ 151.719775][T11698] workingset_refault_file 0 [ 151.724288][T11698] swap 102400 [ 151.727647][T11698] swapcached 0 [ 151.731031][T11698] pgpgin 106836 [ 151.734488][T11698] pgpgout 106779 [ 151.738114][T11698] pgfault 127159 [ 151.741697][T11698] pgmajfault 29 [ 151.745161][T11698] inactive_anon 233472 [ 151.749285][T11698] active_anon 0 [ 151.752745][T11698] inactive_file 0 [ 151.756426][T11698] active_file 0 [ 151.759913][T11698] unevictable 0 [ 151.763373][T11698] hierarchical_memory_limit 314572800 [ 151.768776][T11698] hierarchical_memsw_limit 9223372036854771712 [ 151.774974][T11698] total_cache 0 [ 151.778533][T11698] total_rss 233472 [ 151.782342][T11698] total_shmem 0 [ 151.785846][T11698] total_mapped_file 0 [ 151.789839][T11698] total_dirty 0 [ 151.793366][T11698] total_writeback 0 [ 151.797181][T11698] total_workingset_refault_anon 55 [ 151.802293][T11698] total_workingset_refault_file 0 [ 151.807373][T11698] total_swap 102400 [ 151.811214][T11698] total_swapcached 0 [ 151.815222][T11698] total_pgpgin 106836 [ 151.819249][T11698] total_pgpgout 106779 [ 151.823360][T11698] total_pgfault 127159 [ 151.827442][T11698] total_pgmajfault 29 [ 151.831483][T11698] total_inactive_anon 233472 [ 151.836088][T11698] total_active_anon 0 [ 151.840070][T11698] total_inactive_file 0 [ 151.844342][T11698] total_active_file 0 [ 151.848355][T11698] total_unevictable 0 [ 151.852369][T11698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3291,pid=11696,uid=0 [ 151.867192][T11698] Memory cgroup out of memory: Killed process 11698 (syz.8.3291) total-vm:95744kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 152.178084][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 152.178098][ T29] audit: type=1326 audit(1178.666:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.209911][ T29] audit: type=1326 audit(1178.698:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.233170][ T29] audit: type=1326 audit(1178.698:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.256295][ T29] audit: type=1326 audit(1178.698:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.279281][ T29] audit: type=1326 audit(1178.698:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.302305][ T29] audit: type=1326 audit(1178.698:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.325343][ T29] audit: type=1326 audit(1178.698:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.348325][ T29] audit: type=1326 audit(1178.698:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.371376][ T29] audit: type=1326 audit(1178.698:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11751 comm="syz.8.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19113febe9 code=0x7ffc0000 [ 152.426925][T11765] bond_slave_1: mtu less than device minimum [ 152.480535][ T5556] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.576212][ T5556] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.603524][ T5556] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.642063][ T5556] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.709992][T11785] lo speed is unknown, defaulting to 1000 [ 152.798828][T11785] chnl_net:caif_netlink_parms(): no params data found [ 152.852040][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.859201][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.866985][T11785] bridge_slave_0: entered allmulticast mode [ 152.873652][T11785] bridge_slave_0: entered promiscuous mode [ 152.893180][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.900602][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.909277][T11785] bridge_slave_1: entered allmulticast mode [ 152.916138][T11785] bridge_slave_1: entered promiscuous mode [ 152.952125][ T5556] bridge0 (unregistering): left allmulticast mode [ 153.128297][ T5556] bond0 (unregistering): Released all slaves [ 153.138067][ T5556] bond1 (unregistering): Released all slaves [ 153.163730][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.174750][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.200626][T11785] team0: Port device team_slave_0 added [ 153.209106][T11785] team0: Port device team_slave_1 added [ 153.221105][ T5556] hsr_slave_0: left promiscuous mode [ 153.226983][ T5556] hsr_slave_1: left promiscuous mode [ 153.234867][ T5556] pim6reg (unregistering): left allmulticast mode [ 153.277704][T11831] loop9: detected capacity change from 0 to 1024 [ 153.309543][ T29] audit: type=1400 audit(1179.852:3467): avc: denied { read } for pid=11835 comm="syz.8.3347" path="socket:[36269]" dev="sockfs" ino=36269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.309986][T11831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.404613][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.411601][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.437757][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.449759][ T4467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.450991][T11844] pim6reg1: entered promiscuous mode [ 153.464282][T11844] pim6reg1: entered allmulticast mode [ 153.479097][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.486102][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.512108][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.543113][T11853] ref_ctr increment failed for inode: 0xc52 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888104263f40 [ 153.554769][T11852] uprobe: syz.8.3353:11852 failed to unregister, leaking uprobe [ 153.571791][T11785] hsr_slave_0: entered promiscuous mode [ 153.578186][T11785] hsr_slave_1: entered promiscuous mode [ 153.584194][T11785] debugfs: 'hsr0' already exists in 'hsr' [ 153.589960][T11785] Cannot create hsr debugfs directory [ 153.667067][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3354'. [ 153.683069][T11859] ip6gre1: entered allmulticast mode [ 153.700586][ T5556] IPVS: stop unused estimator thread 0... [ 153.919563][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3360'. [ 153.996405][T11785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.008927][T11785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.025074][T11785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.043541][T11785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.115479][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.132488][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.142732][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.149848][ T5599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.162906][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.170082][ T5556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.208828][T11896] loop6: detected capacity change from 0 to 512 [ 154.216425][T11896] EXT4-fs: Ignoring removed nobh option [ 154.239555][T11896] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3376: iget: bad i_size value: 38620345925642 [ 154.269744][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.282549][T11896] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3376: couldn't read orphan inode 15 (err -117) [ 154.299142][T11896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.406531][T11785] veth0_vlan: entered promiscuous mode [ 154.428203][T11785] veth1_vlan: entered promiscuous mode [ 154.480930][T11785] veth0_macvtap: entered promiscuous mode [ 154.499875][T11785] veth1_macvtap: entered promiscuous mode [ 154.511526][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.533620][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.559409][ T5581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.584384][ T5599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.602244][ T5599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.645813][ T5599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.859732][T11895] ================================================================== [ 154.867913][T11895] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 154.877855][T11895] [ 154.880197][T11895] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 154.888281][T11895] tick_do_update_jiffies64+0x113/0x1c0 [ 154.893853][T11895] tick_nohz_handler+0x7f/0x2d0 [ 154.898741][T11895] __hrtimer_run_queues+0x20f/0x5a0 [ 154.903952][T11895] hrtimer_interrupt+0x21a/0x460 [ 154.908900][T11895] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 154.914812][T11895] sysvec_apic_timer_interrupt+0x32/0x80 [ 154.920473][T11895] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.926464][T11895] [ 154.928791][T11895] read to 0xffffffff868099c0 of 8 bytes by task 11895 on cpu 0: [ 154.936425][T11895] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 154.942679][T11895] count_shadow_nodes+0x6a/0x230 [ 154.947659][T11895] do_shrink_slab+0x60/0x680 [ 154.952261][T11895] shrink_slab+0x448/0x760 [ 154.956691][T11895] shrink_node+0x6c3/0x2120 [ 154.961208][T11895] do_try_to_free_pages+0x3f6/0xcd0 [ 154.966409][T11895] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 154.972310][T11895] try_charge_memcg+0x358/0x9e0 [ 154.977166][T11895] obj_cgroup_charge_pages+0xa6/0x150 [ 154.982580][T11895] __memcg_kmem_charge_page+0x9f/0x170 [ 154.988068][T11895] __alloc_frozen_pages_noprof+0x188/0x360 [ 154.993902][T11895] alloc_pages_mpol+0xb3/0x250 [ 154.998695][T11895] alloc_pages_noprof+0x90/0x130 [ 155.003655][T11895] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 155.009497][T11895] __kvmalloc_node_noprof+0x30f/0x4e0 [ 155.014890][T11895] ip_set_alloc+0x1f/0x30 [ 155.019260][T11895] hash_netiface_create+0x282/0x740 [ 155.024461][T11895] ip_set_create+0x3c9/0x960 [ 155.029062][T11895] nfnetlink_rcv_msg+0x4c6/0x590 [ 155.034017][T11895] netlink_rcv_skb+0x120/0x220 [ 155.038793][T11895] nfnetlink_rcv+0x16b/0x1690 [ 155.043491][T11895] netlink_unicast+0x5c0/0x690 [ 155.048260][T11895] netlink_sendmsg+0x58b/0x6b0 [ 155.053035][T11895] __sock_sendmsg+0x142/0x180 [ 155.057732][T11895] ____sys_sendmsg+0x31e/0x4e0 [ 155.062507][T11895] ___sys_sendmsg+0x17b/0x1d0 [ 155.067209][T11895] __x64_sys_sendmsg+0xd4/0x160 [ 155.072069][T11895] x64_sys_call+0x191e/0x2ff0 [ 155.076753][T11895] do_syscall_64+0xd2/0x200 [ 155.081321][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.087223][T11895] [ 155.089548][T11895] value changed: 0x00000000ffffc81f -> 0x00000000ffffc820 [ 155.096657][T11895] [ 155.098975][T11895] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.105121][T11895] CPU: 0 UID: 0 PID: 11895 Comm: syz.5.3367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.114948][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.125013][T11895] ================================================================== [ 155.194999][T11895] syz.5.3367 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 155.209497][T11895] CPU: 0 UID: 0 PID: 11895 Comm: syz.5.3367 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.209528][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.209546][T11895] Call Trace: [ 155.209554][T11895] [ 155.209564][T11895] __dump_stack+0x1d/0x30 [ 155.209661][T11895] dump_stack_lvl+0xe8/0x140 [ 155.209684][T11895] dump_stack+0x15/0x1b [ 155.209706][T11895] dump_header+0x81/0x220 [ 155.209746][T11895] oom_kill_process+0x342/0x400 [ 155.209793][T11895] out_of_memory+0x979/0xb80 [ 155.209834][T11895] try_charge_memcg+0x5e6/0x9e0 [ 155.209868][T11895] obj_cgroup_charge_pages+0xa6/0x150 [ 155.209924][T11895] __memcg_kmem_charge_page+0x9f/0x170 [ 155.209964][T11895] __alloc_frozen_pages_noprof+0x188/0x360 [ 155.210014][T11895] alloc_pages_mpol+0xb3/0x250 [ 155.210185][T11895] alloc_pages_noprof+0x90/0x130 [ 155.210218][T11895] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 155.210275][T11895] __kvmalloc_node_noprof+0x30f/0x4e0 [ 155.210381][T11895] ? ip_set_alloc+0x1f/0x30 [ 155.210404][T11895] ? ip_set_alloc+0x1f/0x30 [ 155.210426][T11895] ? __kmalloc_cache_noprof+0x189/0x320 [ 155.210559][T11895] ip_set_alloc+0x1f/0x30 [ 155.210581][T11895] hash_netiface_create+0x282/0x740 [ 155.210608][T11895] ? __pfx_hash_netiface_create+0x10/0x10 [ 155.210659][T11895] ip_set_create+0x3c9/0x960 [ 155.210697][T11895] ? __nla_parse+0x40/0x60 [ 155.210808][T11895] nfnetlink_rcv_msg+0x4c6/0x590 [ 155.210857][T11895] netlink_rcv_skb+0x120/0x220 [ 155.210878][T11895] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 155.210969][T11895] nfnetlink_rcv+0x16b/0x1690 [ 155.211008][T11895] ? nlmon_xmit+0x4f/0x60 [ 155.211033][T11895] ? consume_skb+0x49/0x150 [ 155.211120][T11895] ? nlmon_xmit+0x4f/0x60 [ 155.211154][T11895] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 155.211183][T11895] ? __dev_queue_xmit+0x1200/0x2000 [ 155.211228][T11895] ? __dev_queue_xmit+0x182/0x2000 [ 155.211256][T11895] ? ref_tracker_free+0x37d/0x3e0 [ 155.211281][T11895] ? __netlink_deliver_tap+0x4dc/0x500 [ 155.211314][T11895] netlink_unicast+0x5c0/0x690 [ 155.211394][T11895] netlink_sendmsg+0x58b/0x6b0 [ 155.211418][T11895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.211440][T11895] __sock_sendmsg+0x142/0x180 [ 155.211473][T11895] ____sys_sendmsg+0x31e/0x4e0 [ 155.211576][T11895] ___sys_sendmsg+0x17b/0x1d0 [ 155.211679][T11895] __x64_sys_sendmsg+0xd4/0x160 [ 155.211709][T11895] x64_sys_call+0x191e/0x2ff0 [ 155.211736][T11895] do_syscall_64+0xd2/0x200 [ 155.211902][T11895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 155.211925][T11895] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 155.211959][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.212024][T11895] RIP: 0033:0x7f17e46debe9 [ 155.212042][T11895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.212068][T11895] RSP: 002b:00007f17e3147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.212093][T11895] RAX: ffffffffffffffda RBX: 00007f17e4915fa0 RCX: 00007f17e46debe9 [ 155.212113][T11895] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 155.212128][T11895] RBP: 00007f17e4761e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.212142][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.212203][T11895] R13: 00007f17e4916038 R14: 00007f17e4915fa0 R15: 00007ffc6d8ae968 [ 155.212221][T11895] [ 155.214550][ T5580] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:47: bg 0: block 5: invalid block bitmap [ 155.222204][T11895] memory: usage 307200kB, limit 307200kB, failcnt 355 [ 155.299111][ T5580] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1652 with error 28 [ 155.302721][T11895] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 155.308086][ T5580] EXT4-fs (loop6): This should not happen!! Data will be lost [ 155.308086][ T5580] [ 155.312563][T11895] kmem: usage 241640kB, limit 9007199254740988kB, failcnt 0 [ 155.317058][ T5580] EXT4-fs (loop6): Total free blocks count 0 [ 155.322641][T11895] Memory cgroup stats for /syz5 [ 155.327008][ T5580] EXT4-fs (loop6): Free/Dirty block details [ 155.332199][T11895] : [ 155.342877][T11895] cache 66891776 [ 155.347060][ T5580] EXT4-fs (loop6): free_blocks=0 [ 155.347077][ T5580] EXT4-fs (loop6): dirty_blocks=1656 [ 155.347135][ T5580] EXT4-fs (loop6): Block reservation details [ 155.352144][T11895] rss 241664 [ 155.356945][ T5580] EXT4-fs (loop6): i_reserved_data_blocks=1656 [ 155.362369][T11895] shmem 0 [ 155.362380][T11895] mapped_file 0 [ 155.440541][ T4429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.444999][T11895] dirty 0 [ 155.445010][T11895] writeback 0 [ 155.445019][T11895] workingset_refault_anon 93 [ 155.674226][T11895] workingset_refault_file 1728 [ 155.678998][T11895] swap 94208 [ 155.682213][T11895] swapcached 0 [ 155.685588][T11895] pgpgin 225195 [ 155.689063][T11895] pgpgout 208805 [ 155.692604][T11895] pgfault 190904 [ 155.696140][T11895] pgmajfault 53 [ 155.699643][T11895] inactive_anon 241664 [ 155.703718][T11895] active_anon 0 [ 155.707172][T11895] inactive_file 0 [ 155.710822][T11895] active_file 0 [ 155.714279][T11895] unevictable 66891776 [ 155.718432][T11895] hierarchical_memory_limit 314572800 [ 155.723798][T11895] hierarchical_memsw_limit 9223372036854771712 [ 155.730016][T11895] total_cache 66891776 [ 155.734110][T11895] total_rss 241664 [ 155.737857][T11895] total_shmem 0 [ 155.741320][T11895] total_mapped_file 0 [ 155.745290][T11895] total_dirty 0 [ 155.748783][T11895] total_writeback 0 [ 155.752774][T11895] total_workingset_refault_anon 93 [ 155.757899][T11895] total_workingset_refault_file 1728 [ 155.763184][T11895] total_swap 94208 [ 155.766918][T11895] total_swapcached 0 [ 155.770813][T11895] total_pgpgin 225195 [ 155.774798][T11895] total_pgpgout 208805 [ 155.778866][T11895] total_pgfault 190904 [ 155.782998][T11895] total_pgmajfault 53 [ 155.786992][T11895] total_inactive_anon 241664 [ 155.791578][T11895] total_active_anon 0 [ 155.795567][T11895] total_inactive_file 0 [ 155.799734][T11895] total_active_file 0 [ 155.803749][T11895] total_unevictable 66891776 [ 155.808460][T11895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3367,pid=11893,uid=0 [ 155.823146][T11895] Memory cgroup out of memory: Killed process 11895 (syz.5.3367) total-vm:95744kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 155.980281][ T5556] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.046397][ T5556] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.090774][T11935] $Hÿ: (slave syz_tun): Releasing backup interface [ 156.109731][ T5556] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.205240][ T5556] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.595357][ T5556] $Hÿ (unregistering): Released all slaves [ 156.603731][ T5556] bond0 (unregistering): Released all slaves [ 156.633700][ T5556] tipc: Disabling bearer [ 156.638734][ T5556] tipc: Left network mode [ 156.659856][ T5556] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 156.667032][ T5556] batman_adv: batadv0: Removing interface: veth1_vlan [ 156.676789][ T5556] veth1_macvtap: left promiscuous mode [ 156.682600][ T5556] veth0_macvtap: left promiscuous mode [ 156.688090][ T5556] veth1_vlan: left promiscuous mode [ 156.693495][ T5556] veth0_vlan: left promiscuous mode [ 156.730199][ T5556] pim6reg (unregistering): left allmulticast mode [ 156.779680][ T5584] smc: removing ib device syz! [ 156.804230][T10021] lo speed is unknown, defaulting to 1000 [ 156.810038][T10021] infiniband syz2: ib_query_port failed (-19) [ 156.995704][ T5556] ------------[ cut here ]------------ [ 157.001216][ T5556] WARNING: CPU: 0 PID: 5556 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 157.011435][ T5556] Modules linked in: [ 157.015422][ T5556] CPU: 0 UID: 0 PID: 5556 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.025510][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.035610][ T5556] Workqueue: netns cleanup_net [ 157.040491][ T5556] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 157.046548][ T5556] Code: 35 27 ab fc 4b 83 3c 3e 00 75 19 e8 09 56 90 fc 49 81 ff f8 07 00 00 74 1d e8 fb 55 90 fc 49 83 c7 08 eb d7 e8 f0 55 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 157.066220][ T5556] RSP: 0018:ffffc9000134fc78 EFLAGS: 00010293 [ 157.072323][ T5556] RAX: ffffffff84c7a470 RBX: ffff888109f74740 RCX: ffff88810456a100 [ 157.080333][ T5556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119e5c000 [ 157.088324][ T5556] RBP: ffffffff86c939e0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 157.096309][ T5556] R10: 00000017b01d0900 R11: 0000000000000c00 R12: ffffffff86c93a00 [ 157.104305][ T5556] R13: ffff888109f74768 R14: ffff888119e5c000 R15: 0000000000000000 [ 157.112416][ T5556] FS: 0000000000000000(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 157.121430][ T5556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.128074][ T5556] CR2: 00007faa573f7d60 CR3: 0000000103c78000 CR4: 00000000003506f0 [ 157.136059][ T5556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.144103][ T5556] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 157.152138][ T5556] Call Trace: [ 157.155475][ T5556] [ 157.158417][ T5556] ops_undo_list+0x278/0x410 [ 157.163024][ T5556] cleanup_net+0x2de/0x4d0 [ 157.167546][ T5556] process_scheduled_works+0x4ce/0x9d0 [ 157.173069][ T5556] worker_thread+0x582/0x770 [ 157.177707][ T5556] kthread+0x486/0x510 [ 157.181840][ T5556] ? finish_task_switch+0xad/0x2b0 [ 157.187006][ T5556] ? __pfx_worker_thread+0x10/0x10 [ 157.192191][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.196855][ T5556] ret_from_fork+0xda/0x150 [ 157.201430][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.206100][ T5556] ret_from_fork_asm+0x1a/0x30 [ 157.210950][ T5556] [ 157.213995][ T5556] ---[ end trace 0000000000000000 ]--- [ 157.220218][ T5556] ------------[ cut here ]------------ [ 157.225720][ T5556] WARNING: CPU: 0 PID: 5556 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 157.235850][ T5556] Modules linked in: [ 157.239780][ T5556] CPU: 0 UID: 0 PID: 5556 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.251391][ T5556] Tainted: [W]=WARN [ 157.255204][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.265286][ T5556] Workqueue: netns cleanup_net [ 157.270168][ T5556] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 157.276248][ T5556] Code: f1 26 ab fc 49 83 3c 1e 00 75 19 e8 c5 55 90 fc 48 81 fb f8 07 00 00 74 1d e8 b7 55 90 fc 48 83 c3 08 eb d7 e8 ac 55 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 9a 55 90 fc 5b 41 5e 41 5f [ 157.296063][ T5556] RSP: 0018:ffffc9000134fc78 EFLAGS: 00010293 [ 157.302183][ T5556] RAX: ffffffff84c7a4b4 RBX: 0000000000000008 RCX: ffff88810456a100 [ 157.310180][ T5556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888119e5c808 [ 157.318202][ T5556] RBP: ffffffff86c939e0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 157.326171][ T5556] R10: 00000017b01d0900 R11: 0000000000000c00 R12: ffffffff86c93a00 [ 157.334166][ T5556] R13: ffff888109f74768 R14: ffff888119e5c800 R15: 00000000000007f8 [ 157.342167][ T5556] FS: 0000000000000000(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 157.351125][ T5556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.357736][ T5556] CR2: 00007faa573f7d60 CR3: 0000000103c78000 CR4: 00000000003506f0 [ 157.365820][ T5556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.373813][ T5556] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 157.381820][ T5556] Call Trace: [ 157.385122][ T5556] [ 157.388056][ T5556] ops_undo_list+0x278/0x410 [ 157.392686][ T5556] cleanup_net+0x2de/0x4d0 [ 157.397159][ T5556] process_scheduled_works+0x4ce/0x9d0 [ 157.402653][ T5556] worker_thread+0x582/0x770 [ 157.407369][ T5556] kthread+0x486/0x510 [ 157.411527][ T5556] ? finish_task_switch+0xad/0x2b0 [ 157.416681][ T5556] ? __pfx_worker_thread+0x10/0x10 [ 157.421898][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.426564][ T5556] ret_from_fork+0xda/0x150 [ 157.431127][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.435794][ T5556] ret_from_fork_asm+0x1a/0x30 [ 157.440612][ T5556] [ 157.443664][ T5556] ---[ end trace 0000000000000000 ]--- [ 157.451753][ T5556] IPVS: stop unused estimator thread 0... [ 157.469445][ T5556] ------------[ cut here ]------------ [ 157.475019][ T5556] WARNING: CPU: 1 PID: 5556 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 157.484697][ T5556] Modules linked in: [ 157.488639][ T5556] CPU: 1 UID: 0 PID: 5556 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.500397][ T5556] Tainted: [W]=WARN [ 157.504205][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.514519][ T5556] Workqueue: netns cleanup_net [ 157.519350][ T5556] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 157.524980][ T5556] Code: 48 8d bb 30 0e 00 00 e8 c5 d3 bc fc 48 8b bb 30 0e 00 00 e8 b9 53 c9 fc 5b 41 5e 41 5f 5d e9 fe 95 b3 00 cc e8 38 16 a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 2a 16 a2 fc 90 0f 0b 90 4c 89 f7 e8 8e [ 157.544723][ T5556] RSP: 0018:ffffc9000134fc60 EFLAGS: 00010293 [ 157.550852][ T5556] RAX: ffffffff84b5e428 RBX: ffff888109f74740 RCX: ffff88810456a100 [ 157.558880][ T5556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109f75540 [ 157.566881][ T5556] RBP: ffffffff86c8b840 R08: 0001ffff86847f7f R09: 0000000000000000 [ 157.574929][ T5556] R10: ffffc9000134fbe8 R11: 0001c9000134fbe8 R12: ffffffff86c8b860 [ 157.582910][ T5556] R13: ffff888109f74768 R14: ffff888109f75540 R15: ffff888109f74740 [ 157.591059][ T5556] FS: 0000000000000000(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 157.600030][ T5556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.606751][ T5556] CR2: 0000001b2d919ff8 CR3: 0000000103c78000 CR4: 00000000003506f0 [ 157.614786][ T5556] Call Trace: [ 157.618080][ T5556] [ 157.621008][ T5556] xfrm_net_exit+0x2d/0x60 [ 157.625475][ T5556] ops_undo_list+0x278/0x410 [ 157.630157][ T5556] cleanup_net+0x2de/0x4d0 [ 157.634728][ T5556] process_scheduled_works+0x4ce/0x9d0 [ 157.640250][ T5556] worker_thread+0x582/0x770 [ 157.644882][ T5556] kthread+0x486/0x510 [ 157.648968][ T5556] ? finish_task_switch+0xad/0x2b0 [ 157.654138][ T5556] ? __pfx_worker_thread+0x10/0x10 [ 157.659348][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.663964][ T5556] ret_from_fork+0xda/0x150 [ 157.668485][ T5556] ? __pfx_kthread+0x10/0x10 [ 157.673104][ T5556] ret_from_fork_asm+0x1a/0x30 [ 157.677953][ T5556] [ 157.681027][ T5556] ---[ end trace 0000000000000000 ]--- [ 157.747650][ T5556] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.804492][ T5556] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.862262][ T5556] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.908839][ T5556] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.970313][ T5556] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.014029][ T5556] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.071361][ T5556] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.109507][ T5556] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.328088][ T5556] bond0 (unregistering): Released all slaves [ 158.336234][ T5556] bond1 (unregistering): Released all slaves [ 158.519134][ T5556] $Hÿ (unregistering): Released all slaves [ 158.527573][ T5556] bond0 (unregistering): Released all slaves [ 158.568968][ T5556] tipc: Disabling bearer [ 158.574207][ T5556] tipc: Left network mode [ 158.579376][ T5556] tipc: Disabling bearer [ 158.584706][ T5556] tipc: Left network mode [ 158.599176][ T5556] hsr_slave_0: left promiscuous mode [ 158.605264][ T5556] hsr_slave_1: left promiscuous mode [ 158.613520][ T5556] veth1_macvtap: left promiscuous mode [ 158.619063][ T5556] veth0_macvtap: left promiscuous mode [ 158.624659][ T5556] veth1_vlan: left promiscuous mode [ 158.629925][ T5556] veth0_vlan: left promiscuous mode [ 159.167975][ T5556] IPVS: stop unused estimator thread 0... [ 159.226959][ T5556] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.283016][ T5556] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.348936][ T5556] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.396364][ T5556] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.454854][ T5556] bridge_slave_1: left allmulticast mode [ 159.460568][ T5556] bridge_slave_1: left promiscuous mode [ 159.466260][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.474196][ T5556] bridge_slave_0: left allmulticast mode [ 159.479896][ T5556] bridge_slave_0: left promiscuous mode [ 159.485587][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.558011][ T5556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.567680][ T5556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.577183][ T5556] bond0 (unregistering): Released all slaves [ 159.616364][ T5556] hsr_slave_0: left promiscuous mode [ 159.622002][ T5556] hsr_slave_1: left promiscuous mode [ 159.627745][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.635162][ T5556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.642721][ T5556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.650099][ T5556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.659834][ T5556] veth1_macvtap: left promiscuous mode [ 159.665362][ T5556] veth0_macvtap: left promiscuous mode [ 159.670977][ T5556] veth1_vlan: left promiscuous mode [ 159.676236][ T5556] veth0_vlan: left promiscuous mode [ 159.736824][ T5556] team0 (unregistering): Port device team_slave_1 removed [ 159.747141][ T5556] team0 (unregistering): Port device team_slave_0 removed